Answers are grounded in this paper and cite their sources.
PetitPotam (CVE-2021-36942) made domain controllers send NTLM authentication that was relayed to AD CS web enrollment. How coercion and relay worked, and the fixes. Archived version of https://comcomponent.com/en/blog/windows-petitpotam-cve-2021-36942-ad-cs/, as published on 2026-11-01. The live article is maintained and may change after this date. First published 2026-10-31.
No takes yet. Share an insight, caveat, or question.
Go Komura (2026) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: