CVE-2026-109469

CRITICAL NVD

CVSS Score 10

Severity CRITICAL

Published Nov 06, 2026

Vendor unknown

Description

Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network.