{"uuid": "9d8d20f9-3b71-402c-8a10-64d59b1710c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mtnhge3idy25", "content": "CVE-2026-69836 is a CVSS 10.0 unauthenticated RCE in Microsoft Entra ID. If your Next.js app uses AZURE_AD_CLIENT_ID for SSO, your upstream identity provider was exposed before the patch.", "creation_timestamp": "2026-08-22T04:40:03.895248Z"}