ad cs security

Microsoft’s July security updates close a high-impact Active Directory Certificate Services vulnerability that can turn a low-privileged domain account into a route to full Windows domain compromise. Tracked as CVE-2026-54121 and publicly dubbed Certighost, the flaw abuses a little-known...

CVE-2026-54121 is a high-severity Active Directory Certificate Services privilege-escalation vulnerability that can let an authenticated attacker gain additional privileges remotely. Microsoft fixed the flaw in its July 14, 2026 security updates, making patching certificate authority servers the...