Certighost lets low‑privilege AD users impersonate a Domain Controller
Researchers released Certighost, a proof‑of‑concept exploit that lets a standard Domain Users account obtain a Domain Controller certificate via AD CS mis‑configuration and then authenticate as that machine, enabling DCSync attacks. With a CVSS 8.8 rating, the flaw highlights the risk of unpatched Enterprise CA deployments and forces immediate patching of CVE‑2026‑54121.