Critical Microsoft Entra ID Remote Code Execution Vulnerability Exploited in Wild

A critical CVSS 10.0 vulnerability (CVE-2026-69836) in Microsoft Entra ID has been exploited via unsafe deserialization. While Microsoft reports the flaw is mitigated without user intervention, the specific exploitation vector remains undisclosed, leaving potential for similar attack patterns.