CVE-2026-12249: Insecure Adcs Mscep Http Urlcve-2026-12249-insecure-adcs-mscep-http-url
An insecure HTTP connection is used for AD CS certificate auto-enrollment. This is vulnerable to a Man-in-the-Middle (MITM) attack which can lead to system-wide trust store poisoning. Use 'https://' instead.