CVE-2026-69624
MediumCVSS 6.5Summary
An incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
Risk Assessment
The attack could allow modification of certificate-related data, potentially compromising the integrity of the PKI infrastructure and trust in certificates.
Recommendation
Update AD CS to the latest version and review input validation policies.
Other vulnerabilities in Active Directory Certificate Services
See all- CVE-2026-62810High
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-62818High
Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.
- CVE-2026-54121High
An improper authorization vulnerability in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.