Microsoft Fixes 'Perfect 10' Exploit That Could Have Let Hackers Run Code Remotely

Microsoft disclosed and patched a critical Entra ID vulnerability, CVE-2026-69836, that could have enabled remote code execution over the network without privileges or user interaction. The flaw received the highest severity rating, CVSS 10.0, underscoring the potential impact on Microsoft’s cloud identity and access management platform. Microsoft said it fixed the issue before public disclosure and later confirmed the vulnerability was not exploited in the wild, reducing immediate market risk. While the story is cybersecurity-focused rather than financially material on its own, it is relevant for Microsoft sentiment because it highlights ongoing security exposure in a core enterprise service. The article also notes Microsoft’s broader push into AI-assisted vulnerability discovery and compares the incident with other AI-discovered security issues in crypto and software, reinforcing the growing importance of cybersecurity tools across technology markets.