CVE-2026-69836 Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network

Description

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Entra	Versions not published

Other CVEs of Microsoft Entra

The 14 CVEs of Microsoft Entra →

CVE-2026-83941 Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network 9.9 Critical CVE-2026-62916 Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to… 9.1 Critical CVE-2026-69851 Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over… 9.9 Critical CVE-2026-62869 Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing… 8.8 High