Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2026-27912

CVSS 8.0 2 detections found
View on NVD →
Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

Detection rules

Source Rule Status Updated
splunk Windows AD User Suspicious UPN Change production 2026-09-23
splunk Windows Admin Password Changed by Non-Admin production 2026-09-23