CVE coverage
View on NVD →
CVE-2026-54121
CVSS 8.8
5 detections found
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential CertiGhost AD CS Machine Identity Mismatch (CVE-2026-54121) | production | 2026-09-18 |
| sigma | Suspicious Machine Account Replication - DcSync Indicator | test | 2026-07-30 |
| sigma | ADCS - Certighost Ghost Machine Account Creation | experimental | 2026-07-30 |
| sigma | ADCS - Certighost CDC Chase Certificate Request (CVE-2026-54121) | experimental | 2026-07-27 |
| sigma | ADCS - Certighost Certificate Issued via CDC Chase (CVE-2026-54121) | experimental | 2026-07-27 |