CVE-2026-69836 is a maximum-severity (CVSS 10.0) remote code execution vulnerability in Microsoft Entra ID caused by deserialization of untrusted data. Exploited in the wild, it allows unauthorized attackers to execute code over a network. Microsoft has fully mitigated the issue and no customer action is required.