CVE-2026-109469 rated CVSS 10 in Entra device registration
Original title: CVE-2026-109469: CVSS 10 Entra Device Registration Flaw
The captured page is site navigation and does not describe impact, versions, exploitation, or a fix.
The item title reports CVE-2026-109469 as a CVSS 10 flaw in Entra device registration. The captured text is SOCRadar site navigation and marketing, not a vulnerability write-up. No affected versions, exploit status, or remediation steps are stated.
Unconfirmed: The article body was not included, so impact and exploitation cannot be confirmed from this item.
- The title assigns CVE-2026-109469 a CVSS score of 10.
- No version range, patch, or exploitation status appears in the captured text.
| Product | Affected |
|---|---|
| Microsoft Entra | — |
- CVEs
- CVE-2026-109469
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-109469 | Authorization bypass in Microsoft Entra Device Registration allowing privilege elevation | 10.0 | — |
From the original article
11 min read at socradar.io
Microsoft has disclosed CVE-2026-109469, a critical elevation of privilege vulnerability in Entra Device Registration, the cloud service that registers and joins devices to Microsoft Entra ID. The flaw carries a maximum CVSS score, meaning that an unauthenticated attacker could exploit it over the network with no user interaction. Customers have nothing to patch.
By Yağmur Ernalbant · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.