Microsoft Entra Device Registration: Schwachstelle ermöglicht Privilegieneskalation
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Microsoft Entra Device Registration ausnutzen, um seine Privilegien zu erhöhen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-43941 linked CVE
Open advisory with all CVEs
More on Registration
Other advisories
- CriticalCVE-2026-109469Microsoft Entra Device Registration: Schwachstelle ermöglicht Privilegieneskalation
- MediumCVE-2026-124258ThemeGrill User Registration: fehlende Autorisierung
- MediumCVE-2026-119522ThemeGrill User Registration: fehlende Autorisierung
- MediumCVE-2026-119522ThemeGrill User Registration: fehlende Autorisierung
- MediumCVE-2026-124258ThemeGrill User Registration: fehlende Autorisierung
- CriticalCVE-2026-119075ThemeGrill Registration Form for WooCommerce: unzureichende Rechteverwaltung
- CriticalCVE-2026-119075ThemeGrill Registration Form for WooCommerce: unzureichende Rechteverwaltung
- MediumCVE-2026-120840ThemeGrill User Registration: fehlende Autorisierung
Other news entries
- Bithumb internal groupware hacked, ID numbers and ID copies of 844 customers leakedBreachpwn.watch
- Windows Exploitation Techniques: Dangling COM Object RegistrationsNewsGoogle Project Zero
- OpenAI Investigates Report Linking AI Agents to RubyGems AttackNewsSecurityWeek
- Romania's Land Registry is in the Process of Restoring Services Following CyberattackNewsSANS NewsBites
- DigiCert says an outsider read archived customer validation data, including some passports and driver's licenses, through an internal system left reachable from the internetBreachpwn.watch
- Atomic Arch Supply Chain Attack Hits 1,500 AUR PackagesNewsSecurityWeek
- UN food agency discloses breach affecting 600,000 Gaza householdsNewsBleepingComputer
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4394
ID