Microsoft Azure threat report

Microsoft Entra ID (cloud identity and access management service in Azure) suffered a critical remote code execution vulnerability (CVE-2026-69836) caused by improper deserialization of untrusted data. The vulnerability was actively exploited in the wild before disclosure on August 20, 2026, and required no authentication. Microsoft has already deployed the fix server-side, but organizations should review identity logs and conditional access policies for signs of compromise.

• Microsoft Entra ID Remote Code Execution Vulnerability Exploited(opens in a new tab)
• Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Re(opens in a new tab)
• Microsoft warns of max severity Entra ID flaw exploited in attac(opens in a new tab)
• Microsoft sounds alarm as perfect-10 Entra ID flaw comes under a(opens in a new tab)
• Microsoft Says Latest Entra ID Flaw CVE-2026-69836 Exploited(opens in a new tab)
• Microsoft Patches Entra ID RCE Vulnerability Exploited in Attack(opens in a new tab)