CVE-2026-54121: Improper authorization in Active Directory Certificate

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

• EPSS 1.8% (79.2% percentile)
• CVSS 8.8 high

Detection rules

• ADCS - Certighost CDC Chase Certificate Request (CVE-2026-54121) high
• ADCS - Certighost Certificate Issued via CDC Chase (CVE-2026-54121) high

Related briefings

• Citrus ransomware gang breaks in through contractors 2026-11-11

Browse the CVE database

Read the full analysis on IntelFusions