Microsoft Entra Device Registration elevation of privilege CVE-2026-109469 (CVSS 10.0) โ€” already mitigated in the cloud service ยท updates https://pwn.watch/i/microsoft-entra-device-registration-eop-cve-2026-109469 CVE-2026-109469 is an authorization bypass through a user-controlled key in Microsoft Entra Device Registration that Microsoft rates Critical with CVSS 3.1 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). It lets an unauthorized attacker elevate privileges over a network against the Entra Device Registration service. Microsoft says the vulnerability has already been fully mitigated in the hosted service, customers need no action, and the CVE is published for transparency under Microsoft's cloud-service CVE program. Not known to be exploited or publicly disclosed before publication; Exploitation Less Likely per MSRC. en Fri, 06 Nov 2026 00:00:00 GMT Microsoft Entra Device Registration elevation of privilege CVE-2026-109469 (CVSS 10.0) โ€” already mitigated in the cloud service: NVD lists CVE-2026-109469 as awaiting analysis with Microsoft's Critical 10.0 vector and exclusively-hosted-service tag. https://pwn.watch/i/microsoft-entra-device-registration-eop-cve-2026-109469 https://pwn.watch/i/microsoft-entra-device-registration-eop-cve-2026-109469#2026-11-06-174b4192 Fri, 06 Nov 2026 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-109469">Source</a></p> Microsoft Entra Device Registration elevation of privilege CVE-2026-109469 (CVSS 10.0) โ€” already mitigated in the cloud service: Microsoft publishes CVE-2026-109469 for an Entra Device Registration elevation of privilege (Critical, CVSS 10.0); FAQ says the cloud service is already fully mitigated and customers need no action. https://pwn.watch/i/microsoft-entra-device-registration-eop-cve-2026-109469 https://pwn.watch/i/microsoft-entra-device-registration-eop-cve-2026-109469#2026-11-05-9c8130b3 Thu, 05 Nov 2026 00:00:00 GMT critical <p><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109469">Source</a></p>