CVE catalog
All CVEs

CVE-2026-109469

Microsoft Entra Device Registration privilege escalation in device registration

critical · 10.0

Microsoft Entra Device Registration

Published

Description

Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network.

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.