CVE-2026-26128 SMB Relay Privesc (from shell)

Post-exploitation wrapper for CVE-2026-26128: reads domain identity from an active Windows shell session, then launches the ADIDNS Unicode hostname + Kerberos coercion + SMB relay chain. Operator must still supply password, listener IP, and relay target AD CS or MSSQL. !/usr/bin/env python3 --...

CVE-2026-26128

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...

CVE-2026-26128 Windows SMB Server Elevation of Privilege Vulnerability

...