AUGUST 25, 2026
Live Feed
Back to database
Case File

CVE-2026-69836

CRITICAL · CVSS 10 EPSS 1.59%

Source: NVD + CISA KEV + EPSS · Published 2026-08-20 · Last synced 2026-08-25

CyberRota Analysis

AI-Generated

Microsoft Entra ID is vulnerable to a critical deserialization flaw that enables unauthorized attackers to execute arbitrary code remotely. This vulnerability poses a significant risk to organizations using Microsoft Entra ID, as it could lead to unauthorized access and control over sensitive systems. Enterprises relying on this service should prioritize immediate patching and mitigation efforts to safeguard their environments.

CVE
CVE-2026-69836
Severity
CRITICAL
CVSS
10
EPSS
1.59%
Microsoft

Original NVD Description

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-69851 CRITICAL CVE-2026-69558 HIGH CVE-2026-69555 CRITICAL CVE-2026-69519 HIGH CVE-2026-69400 CRITICAL CVE-2026-68789 CRITICAL