Tag: ad cs

Certighost Exploit Enables Low-Privilege AD Users to Impersonate Domain Controllers

A newly discovered exploit, dubbed Certighost, lets low-privileged Active Directory users impersonate Domain Controllers, posing a significant threat to security. This vulnerability, tracked as CVE-2026-54121, allows attackers to obtain a certificate for a Domain Controller and authenticate as that machine.