{"vulnerability": "cve-2026-69836", "sightings": [{"uuid": "6cafddb4-5465-4728-9df1-69baf147669f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhwyt2g22f", "content": "\ud83d\udea8 CVE-2026-69836 \u2014 CVSS 10 CRITICAL\n\nDeserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code ove...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-69836\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:11:22.229097Z"}, {"uuid": "7c3d8735-8b89-4823-8450-5120c0b2717b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtnanrolbg2r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-65400: 27 interactions\nCVE-2026-69836: 27 interactions\nCVE-2026-64849: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-69836: 27 interactions\nCVE-2026-19490: 3 interactions\nCVE-2026-74866: 3 interactions\n", "creation_timestamp": "2026-08-22T02:38:55.846142Z"}, {"uuid": "9f8d0f2b-f289-4e15-9c83-b897329a18c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkpodrdj32d", "content": "CVE-2026-69836, a CVSS 10 Entra ID remote code execution flaw, was exploited in the wild. Microsoft has fully mitigated it server-side.\n\n#CVE202669836 #EntraID #RemoteCodeExecution #Microsoft #CloudSecurity #RCE", "creation_timestamp": "2026-08-21T02:29:41.693071Z"}, {"uuid": "9d8d20f9-3b71-402c-8a10-64d59b1710c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mtnhge3idy25", "content": "CVE-2026-69836 is a CVSS 10.0 unauthenticated RCE in Microsoft Entra ID. If your Next.js app uses AZURE_AD_CLIENT_ID for SSO, your upstream identity provider was exposed before the patch.", "creation_timestamp": "2026-08-22T04:40:03.895248Z"}, {"uuid": "d175d4eb-1215-4f56-b936-9cdd51beedbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/tyden.bsky.social/post/3mtnjqfap6s2k", "content": "Microsoft opravil kritickou chybu v platform\u011b Entra ID (CVE-2026-69836), kter\u00e1 umo\u017e\u0148ovala \u00fato\u010dn\u00edk\u016fm vykon\u00e1vat k\u00f3d p\u0159es s\u00ed\u0165.", "creation_timestamp": "2026-08-22T05:21:27.366227Z"}, {"uuid": "f3eece15-963e-4219-b70a-3931c1a33dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mtkurvglbo25", "content": "Microsoft Entra ID getroffen door kritieke code-uitvoeringskwetsbaarheid die ree\n\nEen kritieke kwetsbaarheid voor externe code-uitvoering is ontdekt in Microsoft Entra ID, het platform voor identiteits- en toegangsbeheer in de cloud. De kwetsbaarheid, met de identificatie CVE-2026-69836, wer...", "creation_timestamp": "2026-08-21T04:01:10.432645Z"}, {"uuid": "841e1e21-1119-4b6c-a193-652a9744f30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69836", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtl4s3xvto2p", "content": "Critical CVE-2026-69836 in Entra ID allowed remote code execution\u2014fully patched, no user action needed. #SecurityNews #Microsoft #EntraID #RemoteCodeExecution #Cybersecurity https://thedailytechfeed.com/microsoft-addresses-critical-cve-2026-69836-remote-code-execution-flaw-in-entra-id/", "creation_timestamp": "2026-08-21T06:24:26.975614Z"}, {"uuid": "4fd833a8-bf08-4042-93ca-d0c564590763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://t.me/pphm_HackerNews/2784", "content": "\ud83d\udd34 Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution\n\nMicrosoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required.\n\nThe vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant's cloud-based identity and access management service. It was previously called Azure Active Directory or Azure AD.\n\n\"Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network,\" Microsoft said in an alert released Thursday.", "creation_timestamp": "2026-08-21T23:00:05.465484Z"}, {"uuid": "362e52c0-8002-46f5-8b72-a95ff4c2e01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtl5p67xgc2j", "content": "A maximum-severity Entra ID remote code execution flaw (CVE-2026-69836, CVSS 10.0) was exploited in the wild, but Microsoft says it is fully mitigated and needs no customer action.\n", "creation_timestamp": "2026-08-21T06:40:42.381541Z"}, {"uuid": "01155a84-74e8-43d8-a369-cecb2592ca20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mtl5qjcd4m22", "content": "A maximum-severity Entra ID remote code execution flaw (CVE-2026-69836, CVSS 10.0) was exploited in the wild, but Microsoft says it is fully mitigated and needs no customer action.\n", "creation_timestamp": "2026-08-21T06:41:27.263994Z"}, {"uuid": "f9f66727-5df8-46ed-a6b8-a44a243bb700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtl6qi2kpz2z", "content": "Microsoft Entra ID\uff08\u65e7Azure AD\uff09\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027(CVE-2026-69836)\u304c\u78ba\u8a8d\u3055\u308c\u3001\u65e2\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3067\u3059\u304c\u3001\u9867\u5ba2\u306b\u3088\u308b\u5bfe\u5fdc\u306f\u4e0d\u8981\u3067\u2026", "creation_timestamp": "2026-08-21T06:59:20.222900Z"}, {"uuid": "e75df29b-38d1-4b14-8749-5afa690be02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69836", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mtl7q6xjf32k", "content": "Microsoft Entra ID RCE Flaw (CVSS 10.0) Exploited in the Wild \u2014 Patch Is Automatic, But Check Your Logs\n\nhttps://blindthoughts.com/microsoft-entra-id-cve-2026-69836-rce-exploited\n\n#microsoftentraid #remotecodeexecution #activeexploitation #vulnerability #identitysecurity", "creation_timestamp": "2026-08-21T07:17:04.098324Z"}, {"uuid": "d46db73c-3b76-4d1d-afa8-5551d89b0c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtla6vtykz2w", "content": "\ud83e\udd16 CVE-2026-69836 (CVSS 10.0): RCE in Microsoft Entra ID (ex-Azure AD), exploited in the wild. Cloud identity service flaw; no customer action required.\nhttps://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html", "creation_timestamp": "2026-08-21T07:25:17.334172Z"}, {"uuid": "f3501ebb-b7a6-4de6-ae59-f05a63c02035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mtnnofbdew2e", "content": "\ud83d\udee1\ufe0f Revue cyber du 22/08 :\n\u26a0\ufe0f Microsoft Entra ID : faille CVE-2026-69836 activement exploit\u00e9e (RCE, CVSS 10). CERT-FR : https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1074/", "creation_timestamp": "2026-08-22T06:31:54.827624Z"}, {"uuid": "c23f53d4-b710-4260-bda1-9dfc75825f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69836", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mtlbajw4ep2m", "content": "\ud83d\udea8 A perfect 10.0 CVSS score. That's the ceiling.\n\nCVE-2026-69836.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-69836-entra-id-unauthenticated-rce/\n\nby Yazoul AI #InfoSec #DataBreach", "creation_timestamp": "2026-08-21T07:44:06.296854Z"}, {"uuid": "e6a26a44-d8fd-4b7c-9937-c4847db7c584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/pubkraal.com/post/3mtlcgrjtms2d", "content": "Honest to god wondering why microsoft would not release IOCs for CVE-2026-69836. \"Yeah it was a CVSS 10 that was exploited in the wild but lol no we're not going to tell you if you were compromised. Suck it, you're a customer.\"\n\nFucking joke of a company.", "creation_timestamp": "2026-08-21T08:05:29.159675Z"}, {"uuid": "4ae3abe9-ed65-44ab-b3dc-6fea474d2c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2027", "content": "", "creation_timestamp": "2026-08-21T08:45:17.783905Z"}, {"uuid": "814fa17e-f5a2-410c-9862-2d14d077d502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html", "content": "Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required.\n\nThe vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant's cloud-based identity and access management service. It was previously called Azure Active Directory", "creation_timestamp": "2026-08-21T10:00:49.670214Z"}, {"uuid": "83d43b4c-36cd-4d5e-bfed-e6e03743cf91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69836", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mtnr3o7esf2k", "content": "\ud83d\udd12 A perfect score doesn't happen by accident.\n\nCVE-2026-69836.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-69836-entra-id-unauthenticated-rce/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-22T07:33:01.798302Z"}, {"uuid": "9b50506b-4b2f-4bf3-bc86-dd4456eb95e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mtnribfnvj27", "content": "The vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant's cloud-based identity and access management service. It was previously called Azure Active Directory or Azure AD. thehackernews.com/2026/08/micr...", "creation_timestamp": "2026-08-22T07:40:04.563524Z"}, {"uuid": "fe3cd5ff-7608-47ba-8c62-edb7e310c122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "exploited", "source": "Telegram/Do-inhJ-czrsg4wHEiUIgimu249T5UfD5TPzOY88fdyivQ", "content": "", "creation_timestamp": "2026-08-21T11:00:04.141335Z"}, {"uuid": "e313ab76-9a90-450c-a565-777adc6c352c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117133389738699318", "content": "Microsoft has patched a maximum-severity vulnerability, designated as CVE-2026-69836, within the Entra ID identity platform that previously allowed unauthorized remote code execution. No user action is required as the company has already mitigated the flaw.https://www.bleepingcomputer.com/news/microsoft/microsoft-warns-of-max-severity-entra-id-flaw-exploited-in-attacks/", "creation_timestamp": "2026-08-21T12:01:26.611187Z"}, {"uuid": "c300aa2f-0947-49ad-9a9f-714d2e61e2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mtlpnfsbdc24", "content": "Microsoft has patched a maximum-severity vulnerability, designated as CVE-2026-69836, within the Entra ID identity platform that previously allowed unauthorized remote code execution. No user action is required as the company has already mitigated the flaw.\n\nwww.bleepingcomputer.com/news/microso...", "creation_timestamp": "2026-08-21T12:01:52.099503Z"}, {"uuid": "e1f84e32-6fb9-4892-8b94-882a3a419cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2784", "content": "\ud83d\udd34 Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution\n\nMicrosoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required.\n\nThe vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant's cloud-based identity and access management service. It was previously called Azure Active Directory or Azure AD.\n\n\"Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network,\" Microsoft said in an alert released Thursday.", "creation_timestamp": "2026-08-22T00:00:09.302697Z"}, {"uuid": "3effed73-d2c9-4d2f-a334-19ee097b3cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mtlq3zzath2u", "content": "Microsoft corrige falha cr\u00edtica no Entra ID j\u00e1 explorada em ataques inform\u00e1ticos. A vulnerabilidade CVE-2026-69836 permitia que agentes maliciosos executassem c\u00f3digo sem privil\u00e9gios.\n\n#falha #microsoft ", "creation_timestamp": "2026-08-21T12:10:01.990372Z"}, {"uuid": "62963d55-6cdf-437e-acbd-c3856a6ce3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mtlqxtyv222j", "content": "Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836) \n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/21/m...\n\n#Microsoft #vulnerability #cybersecurity", "creation_timestamp": "2026-08-21T12:25:36.608999Z"}, {"uuid": "88eaf917-8be5-4789-88b7-5c241438eae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtlrbmjdjd2q", "content": "Microsoft Entra ID\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\uff08CVE-2026-69836\uff09\n\nMicrosoft\u306f\u3001Entra ID\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027(CVE-2026-69836)\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u305f\u3068\u5831\u544a\u3055\u308c\u3066\u3044\u307e\u3059\u3002 Entra ID\u306f\u3001\u65e7\u79f0Azure Active Directory\u3068\u3057\u3066\u77e5\u3089\u308c\u308bMicrosoft\u306e\u30af\u30e9\u30a6\u30c9ID\u30b5", "creation_timestamp": "2026-08-21T12:31:01.808868Z"}, {"uuid": "5d27e1c1-289f-4b75-8995-2364e421c87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://www.cert.dk/news/2026-08-21/Microsoft-lukker-kritisk-Entra-ID-saarbarhed-udnyttet-i-angreb", "content": "", "creation_timestamp": "2026-08-21T12:45:02.583355Z"}, {"uuid": "56177c13-782f-49ee-a270-40bf7997c8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/captechgroup.com/post/3mtls3sy7vp2i", "content": "A maximum-severity CVSS 10.0 flaw in Microsoft Entra ID is under active exploitation, allowing remote code execution. Two CVEs are in play, CVE-2026-68820 and CVE-2026-69836, with activity attributed to the Lazarus Group.", "creation_timestamp": "2026-08-21T12:45:41.523313Z"}, {"uuid": "21ea8ba8-6b95-45cb-b1ad-b9fbf0b134f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://threatintel.cc/2026/08/21/microsoft-warns-of-max-severity.html", "content": "Microsoft warns of max severity Entra ID flaw exploited in attacks\n\nMicrosoft has patched a maximum-severity vulnerability, designated as CVE-2026-69836, within the Entra ID identity platform that previously allowed unauthorized remote code execution. No user action is required as the company has already mitigated the flaw.", "creation_timestamp": "2026-08-21T13:00:40.564953Z"}, {"uuid": "e513824b-8945-4792-bdd8-5ca87de9c575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mtltqww3fy2g", "content": "Microsoft patched CVE-2026-69836, a max-severity Entra ID flaw that enabled unauthenticated remote code execution. Microsoft says it is fully mitigated, alongside fixes for Azure Arc, Exchange Online, and Azure Managed Instance for Apache Cassandra.", "creation_timestamp": "2026-08-21T13:15:24.160836Z"}, {"uuid": "bbf1351b-a26c-4e73-993e-c504c2921bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtlv56hbmx26", "content": "\ud83d\udd17 CVE : CVE-2026-69836, CVE-2026-69836", "creation_timestamp": "2026-08-21T13:40:07.878402Z"}, {"uuid": "8b0f450c-7ae6-4b6d-bfbc-2a4e2e192a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mtlvh2ly5c2s", "content": "Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)\n\nwww.helpnetsecurity.com/2026/08/21/m...\n\n#Cybersecurity #LargeScaleImpact #Vulnerability", "creation_timestamp": "2026-08-21T13:45:40.793957Z"}, {"uuid": "00775c7b-da50-4ccb-97e4-61cc76e33f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "published-proof-of-concept", "source": "Telegram/C-2rzjpHxWgUYIYy57oArc56LzIM_Yk74iMT0Rk0SLapb9U", "content": "", "creation_timestamp": "2026-08-21T14:00:04.105683Z"}, {"uuid": "e97d35a9-4c17-4692-940e-e5830ad63e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-69836", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtlwkm5i3c2j", "content": "CVSS 10.0 RCE in Entra ID, exploited before anyone outside Microsoft knew it existed.\nIdentity is the control plane. Assume compromise.\n#ThreatIntel #CyberSecurity #CriticalInfrastructure\nhttps://threat-intelligence.redeyesecurity.com/blog/entra-id-cve-2026-69836-cvss-10-exploited-2026", "creation_timestamp": "2026-08-21T14:05:32.393403Z"}, {"uuid": "6cf846c2-50ea-4484-b587-e9c50a07292e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "exploited", "source": "Telegram/Do-inhJ-czrsg4wHEiUIgimu249T5UfD5TPzOY88fdyivQ", "content": "", "creation_timestamp": "2026-08-22T00:00:28.556384Z"}, {"uuid": "f611e33e-e199-4998-a019-e53ba57bf7a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mtm45fyhms23", "content": "Microsoft has confirmed the exploitation of a critical remote code execution vulnerability in Entra ID, tracked as CVE-2026-69836, disclosed on August 20, 2026. This flaw allows attackers to execute arbitrary code without authentication by sending malicious serialized data.", "creation_timestamp": "2026-08-21T15:45:32.467396Z"}, {"uuid": "9e79d4ce-fcf9-461f-ac0d-2728be6cdd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "published-proof-of-concept", "source": "Telegram/C-2rzjpHxWgUYIYy57oArc56LzIM_Yk74iMT0Rk0SLapb9U", "content": "", "creation_timestamp": "2026-08-22T00:00:28.463057Z"}, {"uuid": "c32aef23-f973-47b3-bc7a-9e426b1c6737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/mynameisv.bsky.social/post/3mtm6ytokyk2f", "content": "Et bon week-end avec la vuln CVE-2026-69836 qui coche toutes les cases du CyberBingo:\n- 0day\n- RCE (d\u00e9s\u00e9rialisation de jeton d'authent)\n- Sans authentification\n- CVSS 10.0\n- Impactant Microsoft EntraID\n- Exploit\u00e9e dans la nature\n- Publi\u00e9 vendredi\n- \u00c0 15h\n- En aout\n\ud83d\ude05\nthehackernews.com/2026/08/micr...", "creation_timestamp": "2026-08-21T16:36:41.928631Z"}, {"uuid": "4ac2d84a-add5-4fba-9f53-9db0dd7c0266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-microsoft-entra-id", "content": "", "creation_timestamp": "2026-08-21T16:45:03.680485Z"}, {"uuid": "471b852f-a8ed-4087-8763-5c3c1ae94e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtma5hafa52n", "content": "\ud83d\uded1 CVE-2026-69836\nMicrosoft Entra ID\nCVSS 10.0 / EPSS 1% / KEV \u2705\nTL;DR: Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker t\u2026\nhttps://cvesentinel.com/report/CVE-2026-69836?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-21T16:57:08.262219Z"}, {"uuid": "0f489c25-cd0c-47e6-8ded-1f6ef5b02f1b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/05ab57ac-8af4-4fc5-b706-95502d78424d", "content": "", "creation_timestamp": "2026-08-21T17:00:02.371098Z"}, {"uuid": "91613c8d-c8d4-4759-aa93-0566c44c7110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117134582035516837", "content": "CVE-2026-69836 was added to the KEV. It was published yesterday by Microsoft:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836\nMicrosoft says:\n\nPublicly disclosed:    NoExploited:    NoExploitability assessment: Exploitation Less Likely\nand\n\nThis vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.\nSo does this mean that Microsoft was made aware by a third party that it was EITW? Because presumably it was exploited before it was published if no action is needed by the customer and Microsoft doesn't list it as EITW.", "creation_timestamp": "2026-08-21T17:04:40.880173Z"}, {"uuid": "d40b0d80-a4c0-4944-a22a-ebf32ddf0550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-22T01:00:03.024670Z"}, {"uuid": "30e398b1-056c-42aa-9414-52dfc549280d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://threatintel.cc/2026/08/21/microsoft-warns-of-max-severity.html", "content": "Microsoft warns of max severity Entra ID flaw exploited in attacks\n\nMicrosoft has patched a maximum-severity vulnerability, designated as CVE-2026-69836, within the Entra ID identity platform that previously allowed unauthorized remote code execution. No user action is required as the company has already mitigated the flaw.", "creation_timestamp": "2026-08-22T01:00:33.038831Z"}, {"uuid": "d7794c46-22e5-4586-906e-ed96c872bb7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkdxjchno2f", "content": "CVE-2026-69836 - microsoft entra\nMicrosoft Entra ID can process data that an attacker controls, which could let them run their own programs on your system over the network. This could give an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoftentra #microsoft #CVE #infosec", "creation_timestamp": "2026-08-20T23:00:10.636123Z"}, {"uuid": "61c0aa3f-e04a-4c04-9625-53ba01f1e596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html", "content": "Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required.\n\nThe vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant's cloud-based identity and access management service. It was previously called Azure Active Directory", "creation_timestamp": "2026-08-22T01:00:32.674918Z"}, {"uuid": "2180e277-418f-4589-aef0-0b8610243eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69836", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mtmdqrz2m42e", "content": "Microsoft says CVE-2026-69836, a CVSS 10.0 Entra ID RCE flaw, has been exploited in the wild but is fully mitigated with no user action required.", "creation_timestamp": "2026-08-21T18:01:38.801365Z"}]}