CVE-2026-105727

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-105728

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network...

CVE-2026-102226

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-100214

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...

EUVD-2026-100375

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-102226

A path traversal vulnerability exists in Dynamics Business Central due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High), with impacts on confid...

EUVD-2026-100328

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...

CVE-2026-100214

Dynamics Business Central is vulnerable to a Remote Code Execution (RCE) flaw due to the deserialization of untrusted data . An authorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . Microsoft has ad...

EUVD-2026-99030

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network...

CVE-2026-105728

A vulnerability in Dynamics Business Central allows an unauthorized attacker to disclose information over a network due to improper authentication (CWE-306). The impact is characterized as a high confidentiality risk, as the flaw enables unauthorized information disclosure. No specific exploit de...

EUVD-2026-99029

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-105727

A path traversal vulnerability (CWE-22) exists in Microsoft Dynamics 365 Business Central . Due to an improper limitation of a pathname to a restricted directory, an authorized attacker can achieve elevation of privileges over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) ....

Vulnerabilities in Microsoft Dynamics

Microsoft has addressed vulnerabilities in various Dynamics components. A malicious individual could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the following tables: Microsoft Dataverse: | CVE-ID | CVSS | Impact | |--------|------|---------| |...

Dynamics Business Central Information Disclosure Vulnerability

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network...

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...

Dynamics Business Central Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

KLA91339 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerabilit...

CVE-2026-102226: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-100214: Deserialization of Untrusted Data

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...