CVE-2026-69836: Deserialization of untrusted data in Microsoft Entra ID

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

• EPSS 1.5% (74.1% percentile)
• CVSS 10 critical

Related briefings

• Microsoft says a 10.0 Entra ID flaw was never exploited 2026-08-22

Browse the CVE database

Read the full analysis on IntelFusions