{"uuid": "30a3daa6-49ab-42fd-97c4-5ba636882b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54121", "type": "published-proof-of-concept", "source": "https://t.me/BleepingComputer/25344", "content": "\u200aCertighost and the Privilege Hiding in Your Certificate Authority\n\nCVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. [...]\n\nhttps://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/", "creation_timestamp": "2026-08-19T00:00:07.538100Z"}