{"id":"CVE-2026-118735","kind":"vulnerability","aliases":["CVE-2026-118735"],"related":[],"title":"Windows Active Directory Domain Services: weak authentication lets attacker gain privileges","description":"Weak authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.","summary":"Active Directory Domain Services has weak authentication that lets an attacker who already holds a valid account elevate their privileges over the network. An attacker who gets this access could reach rights they should not have on the directory.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["active-directory","domain-controller","infrastructure","windows"],"not_affected_if":["no-active-directory"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:50+00:00","first_seen_at":"2026-11-10T19:24:55+00:00","triaged_at":"2026-11-10T19:44:40+00:00","updated_at":"2026-11-10T19:44:40+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:44:40Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Active Directory Domain Services: weak authentication lets attacker gain privileges","impact":"high","summary":"Active Directory Domain Services has weak authentication that lets an attacker who already holds a valid account elevate their privileges over the network. An attacker who gets this access could reach rights they should not have on the directory.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","active-directory","domain-controller"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Authorized attacker gains elevated privileges across the directory over the network","analyst_note":"Check the NVD entry and the Microsoft Security Update Guide for CVE-2026-118735 for affected versions, the fix and how to check exposure.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-active-directory"],"who_is_affected":"Organizations running Active Directory Domain Services on Windows domain controllers are the systems to look at. The sources do not say which Windows versions or configurations are affected, and the sources do not name a product version range. Environments without Active Directory Domain Services can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000679,"input_tokens":4488,"output_tokens":461,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the NVD entry and the Microsoft Security Update Guide for CVE-2026-118735 for affected versions, the fix and how to check exposure.","search":"'-118735':14A,17A '-2026':13A,16A 'access':54B 'account':42B 'activ':2A,19B,26B,68C 'active-directori':18B 'allow':72C 'alreadi':38B 'attack':9A,36B,50B,75C 'authent':7A,32B,66C 'author':74C 'control':23B 'could':55B 'cve':12A,15A 'directori':3A,20B,27B,64B,69C 'domain':4A,22B,28B,70C 'domain-control':21B 'elev':43B,77C 'gain':10A 'get':52B 'hold':39B 'infrastructur':24B 'let':8A,34B 'network':48B,81C 'privileg':11A,45B,78C 'reach':56B 'right':57B 'servic':5A,29B,71C 'valid':41B 'weak':6A,31B,65C 'window':1A,25B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Active Directory Domain Services on Windows domain controllers are the systems to look at. The sources do not say which Windows versions or configurations are affected, and the sources do not name a product version range. Environments without Active Directory Domain Services can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["activedirectory","domaincontroller","high","infrastructure","windows"],"campaign_type":null,"search_a":"'-118735':14A,17A '-2026':13A,16A 'activ':2A 'attack':9A 'authent':7A 'cve':12A,15A 'directori':3A 'domain':4A 'gain':10A 'let':8A 'privileg':11A 'servic':5A 'weak':6A 'window':1A","search_b":"'access':54B 'account':42B 'activ':19B,26B 'active-directori':18B 'alreadi':38B 'attack':36B,50B 'authent':32B 'control':23B 'could':55B 'directori':20B,27B,64B 'domain':22B,28B 'domain-control':21B 'elev':43B 'get':52B 'hold':39B 'infrastructur':24B 'let':34B 'network':48B 'privileg':45B 'reach':56B 'right':57B 'servic':29B 'valid':41B 'weak':31B 'window':25B","search_c":"'activ':68C 'allow':72C 'attack':75C 'authent':66C 'author':74C 'directori':69C 'domain':70C 'elev':77C 'network':81C 'privileg':78C 'servic':71C 'weak':65C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:50+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118735","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118735","severity":null,"published_at":"2026-11-10T19:19:50+00:00","modified_at":"2026-11-10T19:19:50+00:00","first_seen_at":"2026-11-10T19:24:55+00:00","fetched_at":"2026-11-10T19:24:55+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}