← Database

CVE-2026-54121

HIGH CVSS: 8.8 Published: 2026-07-14 Modified: 2026-07-21

Description

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2025Microsoft Windows Server 2022Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows 10 1607

Weakness Type

CWE-285

References