Low priv users hijack the DCs via CVE-2026-54121 flaw

THE content discusses the vulnerability CVE-2026-54121 affecting Microsoft Active Directory Certificate Services (AD CS), which allows low-privileged domain users to impersonate a Domain Controller, leading to potential domain compromise. This vulnerability, with a CVSS score of 8.8, was patched in July 2026. Key points include the details of how the attack works, the implications of the vulnerability, and the importance of updating affected systems to mitigate risks. The article emphasizes the need for applying security updates, monitoring certificate requests, and adjusting permissions to enhance security.