Black & White Path

Jul 27, 2026 · Information Security

How a Normal AD User Can Compromise an Entire Domain via the Certighost Vulnerability (CVE‑2026‑54121)

The Certighost vulnerability (CVE‑2026‑54121) in Microsoft Active Directory Certificate Services allows a regular domain user to impersonate a domain controller, obtain a certificate, perform DCSync, and fully compromise an AD forest, with a publicly released PoC and detailed mitigation steps.