Kerberos reflection using Ghost SPNs can lead to remote SYSTEM elevation (CVE-2025-58726). Default AD DNS registration and missing SMB signing enable the chain; Microsoft patched Oct 2025. #CVE202558726 #Kerberos #GhostSPN https://bit.ly/3LmOMpz