VulnerabilityBleeping Computer
8.8 — CRITICAL
Certighost and the Privilege Hiding in Your Certificate Authority
CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Certighost is a vulnerability in Microsoft's Active Directory Certificate Services that allows an authorized attacker to elevate privileges over a network by coercing an Enterprise CA into issuing a valid authentication certificate for a Domain Controller, compromising the domain.
⚙️Technical Details
💥Impact Assessment
Severity: High
🛡️Recommended Actions
1Apply Microsoft's July 14, 2026 update to every issuing Certification Authority to introduce destination validation that shuts down the specific chase abuse.
2Review and adjust certificate template permissions and machine account defaults to prevent overbroad privileges.
3Implement monitoring that watches endpoints but not the identity control plane to detect potential attacks.
📦Affected Products
Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2022Microsoft Windows Server 2025
🔐NVD Verified DataVERIFIED
CVE-2026-54121 ↗CVSS 8.8 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-285
Affected Products (CPE)
Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows Server 2016Microsoft Windows Server 2019
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.