Exploit for CVE-2026-54121

cve · 2026-07-14

Description

CVE-2026-54121 describes an elevation of privilege vulnerability in Active Directory Certificate Services.

Affected software

Microsoft Windows 10 1607< 10.0.14393.9339

Microsoft Windows 10 1809< 10.0.17763.9020

Microsoft Windows Server 2012 All versions

Microsoft Windows Server 2016< 10.0.14393.9339

All known vulnerabilities by product

Active Directory Certificate Services Windows

CVSS 8.8 for CVE-2026-54121

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

1.1%higher than 61.5% of all CVEs

Updated 2026-08-19

CVE Information

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121

Exploit Details

Modified:2026-08-19 16:29

Last Seen:2026-08-19 17:23

Reporter:microsoft

Tags

Elevation Of PrivilegeActive DirectoryCertificate Services

Other exploits for CVE-2026-54121

Exploit for Improper Authorization in Microsoft

2026-08-19 L0u7r3GITHUB

Exploit for Improper Authorization in Microsoft

2026-08-03 sam00GITHUB

Exploit for Improper Authorization in Microsoft

2026-07-31 nafiezGITHUB

Exploit for Improper Authorization in Microsoft

2026-07-31 KrakenEUGITHUB

Exploit for Improper Authorization in Microsoft

2026-07-28 ChPratikGITHUB

Exploit for Improper Authorization in Microsoft

2026-07-27 marcgoamGITHUB

Exploit for Improper Authorization in Microsoft

2026-07-27 marcgoamGITHUB

Exploit for Improper Authorization in Microsoft

2026-07-26 GlendonNotGlenGITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-54121
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.