CVE-2026-69836
Microsoft · Published August 20, 2026
10.0
CVSS v3.1
CRITICALCISA KEV — Federal agencies must patch by deadline
Actively exploited in the wild
Patch availableGet patch
Description
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Affected Products
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H