{"uuid": "d21fd93d-b3e7-45c9-80d5-6e97db077c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/pphm_HackerNews/2341", "content": "\ud83d\udd34 New Certighost PoC exploit lets attackers hijack Windows domains\n\nA proof-of-concept exploit for \u201cCertighost,\u201d a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows domain.\n\nTracked as CVE-2026-54121, the vulnerability was fixed by Microsoft as part of the July 2026 Patch Tuesday security updates.\n\n\"An authenticated attacker could manipulate attributes associated with a machine account and obtain a certificate from Active Directory Certificate Services that allows authentication as that machine via PKINIT,\" Microsoft explained.", "creation_timestamp": "2026-08-23T00:00:45.402846Z"}