Microsoft Dynamics 365 (on-premises) (September 2026)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. CVE-2026-65772 Note that Nessus has not tested fo...

Microsoft Dynamics 365 (on-premises) (September 2026)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. CVE-2026-77908 Note that...

Vulnerabilities in Microsoft Dynamics

Microsoft has patched 2 vulnerabilities in Dynamics, both for online and on-premise environments. These vulnerabilities allow malicious actors to gain elevated privileges, execute arbitrary code, and/or access sensitive data. Microsoft Dynamics 365: | CVE-ID | CVSS | Impact |...

CVE-2026-77908

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

CVE-2026-65772

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

EUVD-2026-73738

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

CVE-2026-65772

CVE-2026-65772 is a deserialization of untrusted data flaw in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to execute code over a network. The CVSS 3.1 score is 8.8 (High) with high impact to confidentiality, integrity, and availability, and no user inter...

EUVD-2026-73294

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

CVE-2026-77908

CVE-2026-77908 is a code injection vulnerability in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The flaw stems from improper control of code generation, and the CVSS 3.1 score is 8.8 (HIGH) with impacts ra...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

PT-2026-87982

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

CVE-2026-77908: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

PT-2026-87216

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

CVE-2026-65772: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

Security Updates for Microsoft Dynamics 365 Business Central (August 2026)

The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to missing authorization. An authenticated, remote attacker can exploit this, to disclose potentially sensitive information. Note that Nessus...

Security Updates for Microsoft Dynamics 365 (on-premises) (August 2026)

The Microsoft Dynamics 365 on-premises is missing security updates. It is,therefore, affected by the following vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network. CVE-2026-65815 - Exposure of...

CVE-2026-65815

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

CVE-2026-66301

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

CVE-2026-66301

The provided connected records identify CVE-2026-66301 as an information disclosure vulnerability affecting Microsoft Dynamics 365 (on-premises). The attack surface involves a network exposure where an unauthorized actor can disclose sensitive information. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N...