12313 matches found
CVE-2026-49179
CVE-2026-49179 describes a remote code execution vulnerability in Windows Active Directory Domain Services caused by improper neutralization of special elements used in a command (command injection). The issue allows an unauthenticated attacker to run code over the network with high impact (confi...
CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability
...
EUVD-2026-56302
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability
...
CVE-2026-49179
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
ad-hardening-pentest-lab-
Active Directory Hardening & Mutual Pentest Lab A self-contai...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
Active Directory Security Feature Bypass Vulnerability
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
CVE-2026-20715: Improper Input Validation
Improper input validation in some firmware for some IntelR Active Management Technology IntelR AMT and some IntelR Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result m...
PT-2026-70385
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized remote attacker to execute arbitrary code over a network and...
CVE-2026-65777: Inadequate Encryption Strength
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
CVE-2026-49179: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
CVE-2026-62818: Use After Free
Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...
PT-2026-70918
Name of the Vulnerable Software and Affected Versions FreeIPA affected versions not specified Description An issue exists where the trust-fetch-domains command is restricted by a read-only permission on the trust object instead of a trust-administration permission. This allows an authenticated,...
PT-2026-111215
Уязвимость службы Active Directory Domain Services операционной системы Windows связана с непринятием мер по очистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
PT-2026-70672
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Inadequate encryption strength allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...
CVE-2026-20734: Improper Initialization
Improper initialization in some firmware for some IntelR Active Management Technology IntelR AMT, and some IntelR Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This resul...
KB5120249: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (August 2026)
The remote Windows host is missing security update 5120249. It is, therefore, affected by multiple vulnerabilities - Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
PT-2026-70558
Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description A use after free issue in Active Directory Certificate Services allows an authorized attacker to execute arbitrary code over a network, which can affect the...
CVE-2026-19550: Incorrect Authorization
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...