poslední zpráva · zachyceno
SPOJENO PŘES CVE EPSS 0.02
Microsoft Entra ID Remote Code Execution Vulnerability
Classification: Critical, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 10.0, CVEs: CVE-2026-69836, Summary: Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network. This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
Microsoft veřejná správa FI IT US FR
CVE v události 1
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-69836 | 10.0 3.1 · microsoft | – | 0.02 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 10.0.
Jak se o tom psalo 5
-
· zachyceno · NCSC-FI FI nadpis události
Microsoft Entra ID Remote Code Execution Vulnerability
Classification: Critical, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 10.0, CVEs: CVE-2026-69836, Summary: Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network. This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.
-
· CSIRT Itálie (ACN) IT
Rilevato sfruttamento di vulnerabilità in Microsoft Entra ID
Rilevato lo sfruttamento attivo in rete di una vulnerabilità con gravità “critica” - già sanata dal vendor - relativa a Microsoft Entra ID, servizio cloud di gestione delle identità e degli accessi. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un utente non autenticato di eseguire codice arbitrario sui dispositivi target.
-
· zachyceno · CISA KEV US
Microsoft Entra ID Deserialization of Untrusted Data Vulnerability (CVE-2026-69836)
CISA added CVE-2026-69836 to the Known Exploited Vulnerabilities catalog. Affected product: Microsoft Entra ID. Remediation due date: 2026-08-24.
-
· zachyceno · CERT-FR – avis FR
Vulnérabilité dans Microsoft Entra ID (21 août 2026)
Une vulnérabilité a été découverte dans Microsoft Entra ID. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance. Microsoft indique que la vulnérabilité CVE-2026-69836 est activement exploitée.
-
· zachyceno · Microsoft Security US
CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.