Certighost to Domain Takeover: AD CS chase referrals weaponized for Domain Controller impersonation.

Certighost (CVE-2026-54121) is a critical improper-authorization vulnerability in Microsoft Active Directory Certificate Services (AD CS) that allows any low-privileged authenticated domain user to impersonate a Domain Controller.