---
title: Microsoft discloses a CVSS 10.0 authorization bypass in Entra Device Registration, already fixed in the cloud | ctxsec
url: https://ctxsec.com/items/msrc-cve-2026-109469-entra-device-registration-eop-cloud-fixed
description: "CVE-2026-109469 is an authorization bypass through a user-controlled key (CWE-639) in Entra Device Registration that let an unauthenticated attacker elevate privileges over the network. Microsoft rates it Critical with a CVSS 3.1 base score of 10.0, says it has fully mitigated the issue in the service, and says there is nothing for customers to do. Microsoft marks it as not publicly disclosed and not exploited at release."
status: "official (MSRC cloud-service CVE, released Nov 5); no customer action required; not exploited per Microsoft"
published: 2026-11-09
---

> CVE-2026-109469 is an authorization bypass through a user-controlled key (CWE-639) in Entra Device Registration that let an unauthenticated attacker elevate privileges over the network. Microsoft rates it Critical with a CVSS 3.1 base score of 10.0, says it has fully mitigated the issue in the service, and says there is nothing for customers to do. Microsoft marks it as not publicly disclosed and not exploited at release.

[← Cybersecurity News](/news) · [markdown](/items/msrc-cve-2026-109469-entra-device-registration-eop-cloud-fixed.md)

official (MSRC cloud-service CVE, released Nov 5); no customer action required; not exploited per Microsoft

2026-11-09

### Microsoft discloses a CVSS 10.0 authorization bypass in Entra Device Registration, already fixed in the cloud

- Microsoft publishes CVEs like this for cloud services to be transparent even when no customer patch exists.
- Nothing to install. If you want to double-check, review Entra audit logs for unexpected device registrations or device-owner changes from before the fix, but Microsoft reports no exploitation.

Sources: [MSRC: CVE-2026-109469](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109469) · [SANS Stormcast, Nov 9](https://isc.sans.edu/podcastdetail/10170)