---
id: "CVE-2026-118146"
page: "https://infrastack.ai/live/CVE-2026-118146"
kind: "vulnerability"
aliases: ["CVE-2026-118146"]
title: "Active Directory Domain Services: authorization flaw lets an attacker run code"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["active-directory", "domain-controller", "infrastructure", "windows-server"]
not_affected_if: ["unknown"]
published_at: "2026-11-10T19:19:34+00:00"
first_seen_at: "2026-11-10T19:24:49+00:00"
updated_at: "2026-11-10T19:30:17+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118146", "first_seen_at": "2026-11-10T19:24:49+00:00"}]
exploit_sources: []
---

# Active Directory Domain Services: authorization flaw lets an attacker run code

Link for people: https://infrastack.ai/live/CVE-2026-118146 (this .md is for agents)

Active Directory Domain Services has an incorrect authorization check that lets an authorized attacker execute code over the network. The sources give no further detail on the affected versions or the exact trigger.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:49+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118146

## From the sources

Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_