Certighost Exploit Enables Low-Privileged AD Users to Impersonate Domain Controllers
On July 24, 2026, researchers H0j3n and Aniq Fakhrul published a working exploit for a Microsoft Active Directory Certificate Services (AD CS)…
Tag: privilege escalation
CVE-2026-54121: Active Directory Certificate Services Improper Authorization Vulnerability
CVE-2026-54121 is a critical vulnerability in Microsoft's Active Directory Certificate Services (AD CS) that allows low-privileged users to impersonate a Domain Controller.…
LinPEAS Privilege Escalation Script
A standard Linux privilege escalation enumeration script. The attacker used a customized version that checked for four 2026 kernel vulnerabilities (Copy Fail,…
CVE-2021-4034: Polkit pkexec Local Privilege Escalation
A local privilege escalation vulnerability in polkit's pkexec utility. The attacker staged exploit code for this older flaw alongside the AI agent…
Claude Cowork Sandbox Escape Flaw Exposes Mac Files to AI Agent
Cybersecurity researchers at Accomplish AI have disclosed a sandbox escape vulnerability in Anthropic's Claude Cowork, tracked as SharedRoot, that allows an AI…
CVE-2026-64600: RefluXFS Linux Kernel Flaw
A critical Linux kernel vulnerability in XFS filesystem reflink handling, allowing local privilege escalation to root. Affects Linux 4.11+ with reflink-enabled XFS.…
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
A critical Linux kernel vulnerability, tracked as CVE-2026-64600 and named RefluXFS, has been disclosed by Qualys. The flaw, present in Linux kernels…
Check Point Patches Actively Exploited SmartConsole Authentication Bypass Flaw CVE-2026-16232
Check Point has released security updates to address multiple vulnerabilities in its Security Management and Multi-Domain Management (MDSM) products, including a critical…
CVE-2026-62145: Check Point Gaia Portal Privilege Management Vulnerability
An improper privilege management vulnerability in Check Point Gaia Portal (CVSS 7.5) allowing authenticated read-only users to execute commands with root privileges.
Check Point Gaia Portal
Web-based management interface for Check Point Gaia operating system. Affected by CVE-2026-62145 privilege management vulnerability.