#kerberos

Analysis · May 20, 2026 · Colten Anderson

noPac: any domain user to Domain Admin, no exploit code required

CVE-2021-42278 and CVE-2021-42287 chain into 'noPac,' which takes a standard domain user to Domain Admin in about one command. There's no memory corruption, just abused Active Directory name handling, riding on a default that lets ordinary users create computer accounts.