CWE-641

Active Directory — SPN Unicode Collision Detection Scanner (CVE-2026-25177)

CVE-2026-25177 is a privilege escalation vulnerability in Active Directory Domain Services caused by improper restriction of Unicode characters in Service Principal Names (SPNs). An authenticated user with write-SPN permissions can inject Unicode zero-width…