{"vulnerability": "CVE-2026-27912", "sightings": [{"uuid": "cfbafbe4-0946-46f8-8e27-3cfec571442e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "e4a22332-b3b1-4ec3-9614-fa78979e5087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "9c760df8-6fec-4fc4-865f-48999feb0f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/qc8EuM8Ro_JB0nEWybUd-c6JLjAlz3LHwHn05WKBBSScH1U", "content": "", "creation_timestamp": "2026-04-14T20:08:23.000000Z"}, {"uuid": "555288a2-ed6e-4dc8-9d25-7fdae250d4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/6ExXV1Od4VYb8655OqF0XVj9CCY2CfKgx9S1m94H6Y9-vF8", "content": "", "creation_timestamp": "2026-04-14T20:08:37.000000Z"}, {"uuid": "86d5a3c3-37b1-4bbc-80d3-e7bf39bd92ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms2d4esh4s2n", "content": "\ud83d\udccc CVE-2026-27912 - Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network. https://www.cyberhub.blog/cves/CVE-2026-27912", "creation_timestamp": "2026-08-01T20:37:06.677123Z"}, {"uuid": "57df292c-26c2-491a-b932-bf36f54bd758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/403", "content": "ResetNightmare\n\nResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the ability to write a userPrincipalName (UPN) on any account you control. Alternatively, the vulnerability can also be abused by an attacker having the ability to create new users/computers in any OU, as creating a user/computer allows you to get GenericWrite permissions over it.\n\nBlog: Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover", "creation_timestamp": "2026-08-08T00:06:20.273604Z"}, {"uuid": "231ee5fd-b4c1-410d-91a4-f1f792881b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/GithubRedTeam/97197", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ResetNightmare-impacket\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mihat2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 16:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27912 (ResetNightmare) \u2014 Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T18:00:03.273485Z"}, {"uuid": "91343331-87c5-4050-87fd-67fba8f10447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97197", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ResetNightmare-impacket\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mihat2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 16:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27912 (ResetNightmare) \u2014 Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T00:46:42.921845Z"}, {"uuid": "8cdec519-30df-4e49-8bdf-873493401a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/GithubRedTeam/98056", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kerberos-CVE-2026-27912\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oxstussz-eng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:57:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T16:00:23.086696Z"}, {"uuid": "7c08866d-3721-4a14-863a-6d6c3eda4147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3msvc4lr5w323", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nResetNightmare: exploit p\u00fablico permite restablecer cualquier contrase\u00f1a de cuenta de AD (CVE-2026-27912)\n\nLeer M\u00e1s / Read More...", "creation_timestamp": "2026-08-12T14:01:14.859274Z"}, {"uuid": "3ab2c749-d779-4f99-a68d-948a8a9b8f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98079", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ResetNightmare\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Semperis-Community\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PowerShell\n\u2b50 Star\u6570\u91cf\uff1a 194  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 34\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 17:21:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC tool for ResetNightmare (CVE-2026-27912)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T19:00:06.744064Z"}, {"uuid": "96c17009-cfe3-4b13-b720-f6819e02e987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-09T05:11:07.731031Z"}, {"uuid": "fc32cadf-4329-4e83-bd33-86b94416ebba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3msnx32f4g72q", "content": "ResetNightmare: POC tool for ResetNightmare (CVE-2026-27912)", "creation_timestamp": "2026-08-09T15:54:51.668925Z"}, {"uuid": "42e43859-2026-4c84-9a4d-8e9cfa449fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msororpzes2t", "content": "CVE-2026-27912 is trending. Hype score 3, currently #6 on cvemon.\n\nImproper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-27912", "creation_timestamp": "2026-08-09T23:51:11.118835Z"}, {"uuid": "c616f97c-0808-43b9-922e-00a0d0521dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-10T00:00:09.573850Z"}, {"uuid": "195b7b56-a073-4285-be58-870835cd8598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98079", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ResetNightmare\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Semperis-Community\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PowerShell\n\u2b50 Star\u6570\u91cf\uff1a 194  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 34\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 17:21:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC tool for ResetNightmare (CVE-2026-27912)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-15T00:00:15.015707Z"}, {"uuid": "3a2c1f98-3df6-4c0d-a64d-8d1dc19b8760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27912", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mspwfa7tec2r", "content": "Monday\u2019s fuck up - Now Windows - github.com/Semperis-Com... #cve-2026-27912 #exploit #windows #resetnightmare #redteam #tool #critical ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account.", "creation_timestamp": "2026-08-10T10:48:00.736702Z"}, {"uuid": "7d67a58d-85f7-4892-b8b5-1dda01d34a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/GithubRedTeam/98056", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kerberos-CVE-2026-27912\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oxstussz-eng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:57:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-15T00:00:47.390995Z"}, {"uuid": "c752f9f3-ff97-4744-ae1d-820b32bc1b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msqhteu6xm2i", "content": "\ud83d\udce2 CVE-2026-27912 ResetNightmare : PoC de r\u00e9initialisation de mot de passe via Kerberos Change Password\n\nCet article pr\u00e9sente un outil Proof-of-Concept (PoC) pour la vuln\u00e9rabilit\u00e9 CVE-2026-27912, baptis\u00e9e ResetNightmare. ResetNightmare\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#Kerberos #PoC #Cyberveille", "creation_timestamp": "2026-08-10T16:00:07.403113Z"}, {"uuid": "0dee1335-27fd-4f43-ab6e-5e6d7a7c0ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://www.semperis.com/blog/identity-crisis-novel-vulnerabilities-leading-to-kerberos-downgrade-dos-and-full-domain-takeover/", "content": "", "creation_timestamp": "2026-08-06T12:29:46.605176Z"}, {"uuid": "beb7a6e9-2ca3-4372-8e45-57347e17a0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://github.com/Semperis-Community/ResetNightmare", "content": "", "creation_timestamp": "2026-08-06T14:50:50.281624Z"}, {"uuid": "1ae682d5-32bb-47e5-a80d-af4155eb1275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/wh_lab/754", "content": "ResetNightmare\n\nResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the ability to write a userPrincipalName (UPN) on any account you control. Alternatively, the vulnerability can also be abused by an attacker having the ability to create new users/computers in any OU, as creating a user/computer allows you to get GenericWrite permissions over it.\n\nBlog: Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover", "creation_timestamp": "2026-08-15T08:00:03.813620Z"}, {"uuid": "55f3cb24-3803-4db9-b7e5-149a6844a136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/K7zXqOYFd1qXyT9LARXPzqWKeQzalprou3AuwisAGlu--nM", "content": "", "creation_timestamp": "2026-08-15T08:00:04.444562Z"}, {"uuid": "32c29f30-fecc-440c-8fe7-50a223974455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3msqwsavgc22z", "content": "Exploit ResetNightmare with NetExec \n\nCVE-2026-27912: a logical flaw in the Kerberos Change Password protocol lets an attacker with Generic Write on one account reset the password of ANY user/computer, includin\u2026\n\n\ud83d\udd01 RT @azoxlpf | reposted by @cyb3rops\nhttps://x.com/azoxlpf/status/2086829938867376478", "creation_timestamp": "2026-08-10T20:27:56.114377Z"}, {"uuid": "f586f6a4-d788-4a38-9fb7-7045ef44bb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msso2fpdxl2n", "content": "Details and PoC for CVE-2026-27912 (ResetNightmare) are public. This Kerberos flaw lets attackers reset AD passwords and gain SYSTEM.\n\n#CVE202627912 #ResetNightmare #Kerberos #ActiveDirectory #PrivilegeEscalation #InfoSec", "creation_timestamp": "2026-08-11T12:56:45.578824Z"}, {"uuid": "e9a38b86-d0d1-484f-8ad5-b40954726619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3msspa6jc4m2o", "content": "[RSS] Exploiting AD ResetNightmare (CVE-2026-27912) and KerberLoss (CVE-2026-25177) from Linux\n\n\n cravaterouge.com -> \n\n\nOriginal->", "creation_timestamp": "2026-08-11T13:17:52.643059Z"}, {"uuid": "8e1d16fe-db80-44d9-b3ff-d8fffcc80e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98056", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kerberos-CVE-2026-27912\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oxstussz-eng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:57:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-16T00:00:49.042743Z"}, {"uuid": "6db3ddbe-f13c-4475-b5f8-4885da9b89a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "Telegram/K7zXqOYFd1qXyT9LARXPzqWKeQzalprou3AuwisAGlu--nM", "content": "", "creation_timestamp": "2026-08-16T00:00:48.035497Z"}, {"uuid": "fc6f2b23-886c-475c-9a48-41219ce1c028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/wh_lab/754", "content": "ResetNightmare\n\nResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the ability to write a userPrincipalName (UPN) on any account you control. Alternatively, the vulnerability can also be abused by an attacker having the ability to create new users/computers in any OU, as creating a user/computer allows you to get GenericWrite permissions over it.\n\nBlog: Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover", "creation_timestamp": "2026-08-16T00:00:48.700966Z"}, {"uuid": "44e093cc-b138-4685-b900-f73a62711caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/403", "content": "ResetNightmare\n\nResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the ability to write a userPrincipalName (UPN) on any account you control. Alternatively, the vulnerability can also be abused by an attacker having the ability to create new users/computers in any OU, as creating a user/computer allows you to get GenericWrite permissions over it.\n\nBlog: Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover", "creation_timestamp": "2026-08-07T12:00:04.917469Z"}, {"uuid": "b87e34f5-1696-4c39-82f3-c473980bc3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/482", "content": "CVE-2026-27912\n\nImproper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.", "creation_timestamp": "2026-08-28T00:00:38.775253Z"}, {"uuid": "2b771ee7-ac02-4a18-9b20-4a123bf5b18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/482", "content": "CVE-2026-27912\n\nImproper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.", "creation_timestamp": "2026-08-27T15:00:05.097464Z"}, {"uuid": "a8379619-e926-4c2a-a765-0b8046296e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48245", "content": "https://github.com/Semperis-Community/ResetNightmare\n\nProof-of-concept (POC) tool for ResetNightmare (CVE-2026-27912).\n\n#github #poc", "creation_timestamp": "2026-09-02T06:00:05.719674Z"}, {"uuid": "c810f74f-5682-4a96-b1b4-457bb1026785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48245", "content": "https://github.com/Semperis-Community/ResetNightmare\n\nProof-of-concept (POC) tool for ResetNightmare (CVE-2026-27912).\n\n#github #poc", "creation_timestamp": "2026-09-03T00:00:52.754214Z"}]}