← Database

CVE-2026-109469

CRITICAL CVSS: 10.0 Published: 2026-11-06 Modified: 2026-11-06

Description

Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network.

Affected Platforms

Unknown

Weakness Type

CWE-639

References