sign in--:--:--UTC

CVE-2026-54121

☆ pin

CVSS

8.8

Reports

4

First seen

Jul 24, 2026

Last seen

Jul 27, 2026

Affected product

Active Directory Certificate Services (AD CS) on Windows Server 2012–2025 and Windows 10 1607/1809

Associated actors

JadeProx ×1 North Korean threat actors ×1 Void Blizzard ×1

Recent reports

Certighost PoC Exploit Allows Authenticated Attackers to Hijack Windows Domains

Bleeping ComputerJul 27, 2026 Critical

Weekly Threat Recap: AI Breach at Hugging Face, Check Point Exploit, Ransomware Campaigns, and Emerging Attack Vectors

The Hacker NewsJul 27, 2026 High

Microsoft Releases July 2026 Security Updates—628 Vulnerabilities Patched

NICS TaiwanJul 27, 2026 High

Certighost Exploit Allows Low-Privileged AD Users to Impersonate Domain Controllers

The Hacker NewsJul 24, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans