Microsoft Fixes 'Perfect 10' Exploit That Could Have Let Hackers Run Code Remotely

2026-08-24

Microsoft has fixed CVE-2026-69836, a critical deserialization vulnerability in Entra ID that enabled unauthenticated remote code execution without interaction, and confirmed there was no active exploitation before publicly disclosing the CVE for transparency.