{"uuid": "72f8acfe-b6b9-4121-a007-38102b00d766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/pphm_HackerNews/2359", "content": "\ud83d\udd34 Certighost' Flaw Haunts Microsoft Active Directory Certificates\n\nResearchers released a proof-of-concept (PoC) exploit for a now-patched flaw in Microsoft's Active Directory Certificate Services (AD CS) that can allow a low-privileged domain user to impersonate a domain controller and fully compromise an AD environment. The flaw was present due to a defective trust boundary within the certificate-based client authentication aspect of Microsoft AD Services.\n\nIn its July raft of a record 622 Patch Tuesday updates, Microsoft patched a flaw tracked as CVE-2026-54121, which the researchers who discovered and exploited it \u2014 Aniq Fakhrul and Muhammad Ali \u2014 called \"Certighost,\" according to a post by the researchers on GitHub.", "creation_timestamp": "2026-08-21T23:00:07.380656Z"}