CVE-2026-69395
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
The vulnerability in Active Directory Certificate Services (AD CS) involves the use of an externally-controlled format string. This allows an authorized attacker to disclose information over a network.
Risk Assessment
The risk is the potential leakage of confidential data from the certificate infrastructure, which may compromise trust integrity in the organization.
Recommendation
Apply security updates provided by the vendor for AD CS. Restrict access to certificate services to trusted entities only.
Other vulnerabilities in Active Directory Certificate Services
See all- CVE-2026-69624Medium
An incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
- CVE-2026-62810High
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-62818High
Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.
- CVE-2026-54121High
An improper authorization vulnerability in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS