Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4647 articles · 258368 vulns · 37/41 feeds (7d)
← Back to list
10.0
CVE-2026-69836KEVEXPLOITEDPATCHED
microsoft · entra_id

Microsoft Entra ID Remote Code Execution Vulnerability

Description

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

Affected Products

VendorProductVersions
microsoftentra_id-

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftentracert_advisory90%
microsoftazurecert_advisory90%
microsoftexchangecert_advisory90%
microsoft365 copilotcert_advisory90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836(vendor-advisory, patch)

Related News (9 articles)

Tier E
Reddit r/netsec21h ago
Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide
→ No new info (linked only)
Tier D
Help Net Security70d ago
Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs
→ No new info (linked only)
Tier D
Help Net Security72d ago
Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)
→ No new info (linked only)
Tier D
BleepingComputer72d ago
Microsoft warns of max severity Entra ID flaw exploited in attacks
→ No new info (linked only)
Tier B
BSI Advisories72d ago
[NEU] [hoch] Microsoft Azure, Entra ID und Exchange: Mehrere Schwachstellen
→ No new info (linked only)
Tier D
The Hacker News73d ago
Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution
→ No new info (linked only)
Tier B
CERT-FR73d ago
Vulnérabilité dans Microsoft Entra ID (21 août 2026)
→ No new info (linked only)
Tier C
VulDB73d ago
CVE-2026-69836 | Microsoft Entra ID deserialization
→ No new info (linked only)
Tier A
Microsoft MSRC73d ago
CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.110.0 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV✅ Yes
Actively exploited✅ Yes
Patch available
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836
CWECWE-502
PublishedAug 20, 2026
Last enriched73d ago
Trending Score132🔥
Source articles9
Independent8
Info Completeness7/14
Missing: title, description, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-81963EXPKEV
Windows Update Stack Elevation of Privilege Vulnerability
Trending: 112
CRITICALCVE-2026-70352
Azure AI Language Elevation of Privilege Vulnerability
Trending: 54
CRITICALCVE-2026-80098
Copilot Studio Elevation of Privilege Vulnerability
Trending: 54
CRITICALCVE-2026-83711
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Trending: 52
CRITICALCVE-2026-69595
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Trending: 48

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 20, 2026
Added to CISA KEV
Aug 20, 2026
Discovered by ZDM
Aug 20, 2026
Actively Exploited
Oct 26, 2026
Patch Available
Oct 26, 2026