Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2026-25177

CVSS 8.8 2 detections found
View on NVD →
Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

Detection rules

Source Rule Status Updated
splunk Windows AD Computer SPN Modified By User Account production 2026-09-25
splunk Windows AD SPN Unicode Collision Injection production 2026-09-25