Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
More on Low-Privileged
Other advisories
- Not ratedosv:CVE-2026-111048FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes
- Not ratedosv:CLEANSTART-2026-BK20855Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial o...
- Not ratedosv:CLEANSTART-2026-ZM16945When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and t...
- Not ratedosv:CLEANSTART-2026-RA69332Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user
- Not ratedosv:CLEANSTART-2026-UZ72711flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier
- Not ratedosv:CLEANSTART-2026-ST75675flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input
- Not ratedosv:CLEANSTART-2026-LQ61201flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input
- Not ratedosv:CVE-2026-116778FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution
Other news entries
- OpenClaw Vulnerabilities Are “Staggering” in 2026VulnerabilitySANS NewsBites
- Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution VulnerabilityNewsCisco PSIRT
- SSA-880233 (Last Update: 2020-01-14): Incorrect Session Validation Vulnerability in SINEMA ServerNewsSiemens ProductCERT
- SSA-493830 (Last Update: 2018-10-09): Privilege Escalation in ROX IINewsSiemens ProductCERT
- Cisco Secure Firewall Management Center Software Static Credential VulnerabilityNewsCisco PSIRT
- SSA-525431 V1.0: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3NewsSiemens ProductCERT
- SSA-198330 (Last Update: 2018-09-11): Local Privilege Escalation in TD Keypad DesignerNewsSiemens ProductCERT
- SSA-251935 (Last Update: 2020-09-08): Multiple Privilege Escalation Vulnerabilities in SIMATIC RTLS Locating ManagerNewsSiemens ProductCERT
Source: https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html
ID