{"uuid": "0743ddcb-9f55-4ae8-bdd3-c3fb75120bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "seen", "source": "https://t.me/pphm_HackerNews/2341", "content": "\ud83d\udd34 New Certighost PoC exploit lets attackers hijack Windows domains\n\nA proof-of-concept exploit for \u201cCertighost,\u201d a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows domain.\n\nTracked as CVE-2026-54121, the vulnerability was fixed by Microsoft as part of the July 2026 Patch Tuesday security updates.\n\n\"An authenticated attacker could manipulate attributes associated with a machine account and obtain a certificate from Active Directory Certificate Services that allows authentication as that machine via PKINIT,\" Microsoft explained.", "creation_timestamp": "2026-08-21T23:00:07.616004Z"}