Vulnerability intelligence
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
CVSS Score
10
Critical
EPSS — Exploit Probability
1.5%
Riskier than 74% of all CVEs · checked 2026-10-04
Exploitation
Confirmed in the wild
KEV since 2026-08-21
Remediation
Patch available
Federal deadline 2026-08-24
3 articles across 3 outlets · first covered Aug 21, 2026 · latest Aug 21, 2026
Coverage timeline
-
CISA flags Entra ID flaw CVE‑2026‑69836 in KEV listcisa.gov · Aug 21, 2026
-
Microsoft patches critical Azure, Entra ID, Exchange bugswww.securityweek.com · Aug 21, 2026
-
CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw Exploited in the Wildsecurityonline.info · Aug 21, 2026