cve-2026-54121

Certighost CVE-2026-54121 Active Directory Domain Takeover

By Editorial Team | July 31, 2026

Certighost CVE-2026-54121 Active Directory flaw lets any standard user impersonate a Domain Controller and take over the entire domain via DCSync.

Certighost CVE-2026-54121 Active Directory is a certificate-services flaw that turns any ordinary domain-user account into full control of your entire Windows domain — no admin rights, no malware, no phishing required. Microsoft patched it on July 14, 2026, but a full technical writeup and working proof-of-concept went public on July 24. If your Active Directory…