CVE Catalog
CVE-2026-69836
CriticalCVSS 10.0Summary
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized attacker can remotely execute code, potentially leading to full system and data compromise.
Recommendation
Apply patches from Microsoft for Microsoft Entra ID and restrict access to the system.
Original NVD description (English source)
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.