Microsoft warns that a maximum-severity security vulnerability in its Entra ID identity and access management service is exploited “in the wild.” The issue is tracked as CVE-2026-69836 with a CVSS score of 10.0 and involves remote code execution. Microsoft says it has patched the flaw, and it states that no customer action is required.
Entra ID is Microsoft’s cloud service for verifying sign-ins and controlling access to Microsoft 365, Azure, and connected third-party applications. Sources note that the platform was previously known as Azure Active Directory. Bleeping Computer and Help Net Security both focus on the fact that Microsoft is issuing a maximum-severity warning for active exploitation after patching, while also describing the service impact. The Hacker News emphasizes that the vulnerability enables remote code execution within Entra ID and highlights Microsoft’s guidance that customers need not take steps.
Across outlets, the shared details are that Microsoft fixed CVE-2026-69836, the CVSS score is 10.0, and attackers are reported to be exploiting it remotely.
