Microsoft Patches Exploited Entra ID Vulnerability

Microsoft has rolled out 22 new security updates to resolve severe vulnerabilities across its products. The critical Entra ID zero-day vulnerability, tracked as CVE-2026-69836, was exploited in attacks and could have led to remote code execution (RCE). Microsoft discovered the issue internally and patched it on the server side, requiring no action from customers.

The most severe patches address elevation-of-privilege bugs in Azure SQL Database, Azure Arc, and Exchange Online, all with a CVSS score of 10/10. Seven other critical elevation-of-privilege issues were resolved: CVE-2026-68782 (Azure SQL Database), CVE-2026-63509 (Microsoft Fabric), CVE-2026-69851 (Entra ID), CVE-2026-68789 (Azure SQL Database), CVE-2026-69400 (Azure Logic Apps), CVE-2026-62834 (Azure Data Factory), and CVE-2026-66309 (Azure SQL Database).

No customer action is required for the majority of these security defects, as Microsoft has deployed the mitigations on the server side. The company has also fixed a high-severity command injection bug in Copilot that could be exploited remotely for information disclosure (CVE-2026-24301). Additionally, Microsoft is working on patches for ShieldBreak, a zero-day Defender exploit dropped on August 2026 Patch Tuesday by security researcher Nightmare Eclipse.