Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CVE-2026-69836: Microsoft Entra ID can let attackers run code remotely
CVE-2026-69836 · published 14 days ago
Summary
Microsoft Entra ID can process data that an attacker controls, which could let them run their own programs on your system over the network. This could give an unauthorized user the ability to take actions as if they were you. Apply the latest security updates from Microsoft as soon as possible and review access controls.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | entra id | All versions |
| microsoft | microsoft entra | - |
Original advisory text
Microsoft Entra ID Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836 vendor-advisory patch
Severity
10.0
Critical
CVSS 3.1: 10.0 (MITRE)
Exploitation
EPSS 2%
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published20 Aug 2026
Updated30 Aug 2026
First seen20 Aug 2026
Monitor software like this
Free during beta