Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution

Microsoft has warned of a severe security flaw in its Entra ID service, which has been exploited in the wild. The vulnerability allows for remote code execution and has a CVSS score of 10.0, indicating a high level of severity. It affects the company's cloud-based identity and access management service, previously known as Azure Active Directory. Microsoft notes that no action is required from customers to address the issue. The vulnerability is tracked as CVE-2026-69836.