#active-directory
-
Certighost: an ordinary domain user turns the certificate authority into a domain controller
The CVE-2026-54121 vulnerability lets a rank-and-file domain user issue a domain controller certificate and take over the entire domain. Microsoft has shipped a fix, but the real problem lies in accumulated privileges and blind trust in the PKI.
-
Certighost: An Ordinary AD User Can Impersonate a Domain Controller
Researchers have published a working exploit for AD CS that lets an ordinary account obtain a domain controller certificate and, via DCSync, reach the krbtgt secret. Microsoft closed the vulnerability with its July 14 update.