LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CRITICAL CWE-502

CVE-2026-69836

Microsoft Entra ID Remote Code Execution Vulnerability

Microsoft·Entra

10.0/ 10

CVSS 3.1

Critical severity

1.8%

EPSS exploit odds

Chance of exploitation in the next 30 days

Higher than 79% of all CVEs

Not listed

CISA KEV catalog

No confirmed in-the-wild exploitation on CISA's list.

Timeline

Published: Aug 20, 2026
Updated: Oct 30, 2026
First covered: Aug 21, 2026
Latest story: 3 months ago

Summary

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

CWE-502Deserialization of Untrusted Data

Attack profile

Attack vectorNetwork

ComplexityLow

PrivilegesNone

User interactionNone

ScopeChanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected products

Microsoft Entra-

References

CVE.org recordcve.org NVD entrynvd.nist.gov Microsoft Entra ID Remote Code Execution Vulnerabilitymsrc.microsoft.com