{"vulnerability": "cve-2026-25177", "sightings": [{"uuid": "6f39f573-38fe-42cd-8cba-3819ed15ddbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080", "content": "", "creation_timestamp": "2026-03-10T19:07:55.000000Z"}, {"uuid": "a5a9ae29-de7f-479e-8457-0f12aebdc005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "6a714d87-afa4-41a6-aa65-e9fdd28f9a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "b18c012f-5aa6-40af-942c-1777693c897b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "55a4dcca-9ebb-4a01-8308-a67219781be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mgughuahdy2z", "content": "", "creation_timestamp": "2026-03-12T12:44:07.510352Z"}, {"uuid": "adc99ab9-e397-425c-9cdb-3e2f9e6b07cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mguofz6aue2m", "content": "", "creation_timestamp": "2026-03-12T15:06:15.117117Z"}, {"uuid": "1abb1591-ddbc-4630-8450-7f2b4d73ee42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3moekabcov723", "content": "CVE-2026-25177 shows why Active Directory flaws need more than patching: SPN manipulation and Kerberos abuse can raise privileges, so least-privilege governance and tight service account control are essential. #ActiveDirectory #Kerberos #PrivEsc", "creation_timestamp": "2026-06-16T00:30:24.649481Z"}, {"uuid": "9af586c4-aa19-41a8-8406-555feef9ff2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/117111734577014905", "content": "Micropatches released for \"KerberLoss\" Active Directory Domain Services Elevation of Privilege Vulnerability (CVE-2026-25177) https://0patch.com/blog/micropatches-released-for-kerberloss-active-directory-domain-services-elevation-o", "creation_timestamp": "2026-08-17T16:14:15.639585Z"}, {"uuid": "a2abf9b9-334e-4c3c-85ff-9e8d611c6cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-25177", "type": "published-proof-of-concept", "source": "https://www.semperis.com/blog/identity-crisis-novel-vulnerabilities-leading-to-kerberos-downgrade-dos-and-full-domain-takeover/", "content": "", "creation_timestamp": "2026-08-06T12:28:11.417063Z"}, {"uuid": "47fd0b0c-267b-4b18-b70d-a78073b0b7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msqlvmscbg2z", "content": "CVE-2026-25177 is trending. Hype score 1, currently #9 on cvemon.\n\nImproper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-25177", "creation_timestamp": "2026-08-10T17:12:57.808194Z"}, {"uuid": "d3163bf4-0526-4105-bc15-cdd6d05bd75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "Telegram/Hc-P1LWx1XJtzJlF7lBLRMWRJ5dyNw5YYjAy-hklws7-", "content": "", "creation_timestamp": "2026-08-19T23:00:04.772202Z"}, {"uuid": "2bd0db9f-0842-4b62-8a48-f70b06e02091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "Telegram/Hc-P1LWx1XJtzJlF7lBLRMWRJ5dyNw5YYjAy-hklws7-", "content": "", "creation_timestamp": "2026-08-20T00:00:07.871055Z"}, {"uuid": "dbc1b133-2c81-4a94-a669-009e9de20fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3msspa6jc4m2o", "content": "[RSS] Exploiting AD ResetNightmare (CVE-2026-27912) and KerberLoss (CVE-2026-25177) from Linux\n\n\n cravaterouge.com -> \n\n\nOriginal->", "creation_timestamp": "2026-08-11T13:17:52.697557Z"}, {"uuid": "8946185b-6746-470e-9aa6-b7402b48bed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://t.me/thehackernews/9259", "content": "\u26a0\ufe0f A patched AD bug may not end the risk.\n\nRichard Lambert of One Identity explains how CVE-2026-25177 exposes a deeper problem: overbroad AD rights, service account sprawl, and weak governance.\n\nPatch fast. Then fix the permissions underneath.\n\nRead the article: https://thehackernews.com/expert-insights/2026/06/why-active-directory-vulnerabilities.html", "creation_timestamp": "2026-07-15T12:00:05.047311Z"}, {"uuid": "b2316523-e68b-41c1-acb5-1f17c1ce447a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25177", "type": "seen", "source": "https://t.me/thehackernews/9259", "content": "\u26a0\ufe0f A patched AD bug may not end the risk.\n\nRichard Lambert of One Identity explains how CVE-2026-25177 exposes a deeper problem: overbroad AD rights, service account sprawl, and weak governance.\n\nPatch fast. Then fix the permissions underneath.\n\nRead the article: https://thehackernews.com/expert-insights/2026/06/why-active-directory-vulnerabilities.html", "creation_timestamp": "2026-07-16T00:00:09.956735Z"}]}