Certighost CVE-2026-54121: Low-Privilege Users Impersonate a DC via AD CS 1....
Certighost CVE-2026-54121: Low-Privilege Users Impersonate a DC via AD CS
1. Basic Information
Article Title: New Certighost PoC exploit lets attackers hijack Windows domains
Source: BleepingComputer
Published Date: 2026-07-27
A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released…
Certighost exploit lets a domain user obtain a Domain Controller certificate and reach DCSync through a vulnerable AD CS chase.
Microsoft patched a high-severity vulnerability earlier this month that allows a threat actor to escalate privileges and…
La vulnerabilità CertiGhost consente di impersonare un Domain Controller sfruttando Active Directory Certificate Services.
System administrators, run the May 12 patch immediately if you haven't already.
CVE-2026-25177 in Microsoft AD lets authenticated users abuse SPNs to escalate privileges, exposing domain-wide identity risks.
