CVE-2026-54121

HighCVSS 8.8

Published: 14/07/2026(UTC)Updated: 21/07/2026(UTC)Translated: 22/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

52th percentile - higher than 52% of all known CVEs

Summary

An improper authorization vulnerability in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

Risk Assessment

The organization faces the risk of privilege escalation by an authorized user, potentially leading to domain compromise and data confidentiality breaches.

Recommendation

Apply the security update provided by Microsoft for AD CS immediately and review certificate permission configurations.

Other vulnerabilities in Active Directory Certificate Services

CVE-2026-62818High
Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.

Original NVD description (English source)

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.