CVE-2026-69836— Microsoft Entra ID Remote Code Execution Vulnerability
Quick assessment
Affected
Microsoft Microsoft Entra
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Entra是美国Microsoft公司的一款身份认证与访问管理平台。 Microsoft Entra存在反序列化注入漏洞，该漏洞源于对不可信数据的反序列化，可能导致未经授权的攻击者通过网络执行代码。
In-the-Wild Activity Observed
github_trending · low
cisa_kev · confirmed
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Microsoft Entra | - |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-69836
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Microsoft Entra ID Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Entra 反序列化注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Entra是美国Microsoft公司的一款身份认证与访问管理平台。 Microsoft Entra存在反序列化注入漏洞，该漏洞源于对不可信数据的反序列化，可能导致未经授权的攻击者通过网络执行代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft Entra | - | - |
|
II. Public POCs for CVE-2026-69836
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-69836
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-69836 (1)
Same Patch Batch · Microsoft · 2026-08-20 · 21 CVEs total
| CVE-2026-69555 | 10.0 CRITICAL | Azure Arc Elevation of Privilege Vulnerability |
| CVE-2026-65801 | 10.0 CRITICAL | Microsoft Exchange Online Elevation of Privilege Vulnerability |
| CVE-2026-65816 | 10.0 CRITICAL | Azure Arc Elevation of Privilege Vulnerability |
| CVE-2026-65770 | 10.0 CRITICAL | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability |
| CVE-2026-68789 | 9.9 CRITICAL | Azure SQL Database Elevation of Privilege Vulnerability |
| CVE-2026-68782 | 9.9 CRITICAL | Azure SQL Database Elevation of Privilege Vulnerability |
| CVE-2026-63509 | 9.9 CRITICAL | Microsoft Fabric Elevation of Privilege Vulnerability |
| CVE-2026-69851 | 9.9 CRITICAL | Microsoft Entra ID Elevation of Privilege Vulnerability |
| CVE-2026-69400 | 9.6 CRITICAL | Azure Logic Apps Elevation of Privilege Vulnerability |
| CVE-2026-62834 | 9.3 CRITICAL | Azure Data Factory Elevation of Privilege Vulnerability |
| CVE-2026-66309 | 9.1 CRITICAL | Azure SQL Database Elevation of Privilege Vulnerability |
| CVE-2026-66800 | 8.6 HIGH | Azure Data Factory Information Disclosure Vulnerability |
| CVE-2026-69519 | 8.6 HIGH | Azure Stack HCI Information Disclosure Vulnerability |
| CVE-2026-69558 | 8.6 HIGH | Microsoft Partner Center Information Disclosure Vulnerability |
| CVE-2026-69419 | 8.5 HIGH | Azure Data Manager for Energy Remote Code Execution Vulnerability |
| CVE-2026-69543 | 8.5 HIGH | Azure Virtual Machines Elevation of Privilege Vulnerability |
| CVE-2026-69855 | 7.7 HIGH | Microsoft Copilot in Azure Information Disclosure Vulnerability |
| CVE-2026-55013 | 7.1 HIGH | Windows Remote Help Defense Spoofing Vulnerability |
| CVE-2026-70105 | 6.5 MEDIUM | Microsoft Word Information Disclosure Vulnerability |
| CVE-2026-55015 | 5.5 MEDIUM | Microsoft Remote Help Denial of Service Vulnerability |
IV. Related Vulnerabilities
Same product: Microsoft Entra
-
CVE-2026-83941
Entra ID Elevation of Privilege Vulnerability -
CVE-2026-62916
Microsoft Entra ID Elevation of Privilege Vulnerability -
CVE-2026-69851
Microsoft Entra ID Elevation of Privilege Vulnerability -
CVE-2026-62869
Azure Entra ID Spoofing Vulnerability -
CVE-2026-42901
Microsoft Entra ID Elevation of Privilege Vulnerability
Same vendor: Microsoft
-
CVE-2026-105798
SimpleChat: Stored XSS via group document filename in inline -
CVE-2026-105797
SimpleChat: Command injection via authorization-gate orderin -
CVE-2026-105796
Kiota: Code injection through doc-comment delimiter reformat -
CVE-2026-105795
Kiota: Unsafe oauth_card_path references in Kiota-generated -
CVE-2026-105794
MsQuic: Improper Certificate Validation in Microsoft.Native.
Same weakness: CWE-502
-
CVE-2026-82627
Uncanny Automator – AI + Automation for WordPress | AI Agent -
CVE-2026-95606
WordPress The Events Calendar plugin <= 6.17.4 - PHP Object -
CVE-2026-95534
WordPress Unlimited Elements For Elementor (Free Widgets, Ad -
CVE-2026-106558
Backstage: Improper validation of TechDocs MkDocs configurat -
CVE-2026-105192
LMCache Unauthenticated RCE in multiprocess mode via pickle
V. Comments for CVE-2026-69836
No comments yet