CVE-2026-69836: Deserialization of untrusted data in Microsoft Entra ID
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
- CISA KEV-listed (remediation due 2026-08-24)
- EPSS 1.4% (69.8% percentile)
- CVSS 10 critical