{"uuid": "e1f84e32-6fb9-4892-8b94-882a3a419cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2784", "content": "\ud83d\udd34 Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution\n\nMicrosoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required.\n\nThe vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant's cloud-based identity and access management service. It was previously called Azure Active Directory or Azure AD.\n\n\"Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network,\" Microsoft said in an alert released Thursday.", "creation_timestamp": "2026-08-22T00:00:09.302697Z"}