{"uuid": "4639196a-efc9-4c37-ae20-9d1a46fafc3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/VulnerabilityNews/44005", "content": "Certighost and the Privilege Hiding in Your Certificate Authority\n\nCVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. [...]\nhttps://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/", "creation_timestamp": "2026-09-18T12:00:07.563274Z"}