Skip to content
Vulnerability intelligence

CVE-2026-69836: Entra ID deserialization flaw

An IT guide on the Mirage2FA incident says login checks are not enough once the session is stolen

2026
What WebPulse reported · 1 analysis
Stolen session cookies get past MFA, and one Microsoft 365 guide sets out a fix

An IT guide on the Mirage2FA incident says login checks are not enough once the session is stolen

November 2, 2026
View CVE-2026-69836 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795