CVE-2026-40417

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally...

EUVD-2026-29674

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally...

CVE-2026-40417

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally...

CVE-2026-40417

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally...

PT-2026-40227

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 Business Central affected versions not specified Description Weak authentication procedures allow an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer...

EUVD-2021-21129

Malware in sbrugna...

EUVD-2025-10128

Malicious code in bioql PyPI...

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from insufficient validation of input data. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2025-29821

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...

Vulnerability fixed in Microsoft Dynamics

Microsoft has fixed a vulnerability in Dynamics. A vulnerability marked CVE-2025-29821, from incorrect input validation in Dynamics Business Central, allowed a malicious party to gain access to sensitive data. If successfully exploited, the malicious party can recover passwords in unencrypted tex...

CVE-2025-29821

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...

CVE-2025-29821

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...

CVE-2025-29821

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...

CVE-2025-29821

CVE-2025-29821 affects Microsoft Dynamics 365 Business Central. It results from improper input validation in Dynamics Business Central, enabling an authorized attacker to disclose information locally (confidentiality impact HIGH; CVSS v3.1: 5.5 MEDIUM, LOCAL access, no user interaction). Microsof...

PT-2025-15593 · Microsoft · Dynamics Business Central

Name of the Vulnerable Software and Affected Versions: Dynamics Business Central affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to disclose information locally. This means that an attacker with authorization can...

CVE-2024-21380

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...

Information disclosure

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability...

Privilege escalation

Microsoft Dynamics Business Central Elevation Of Privilege Vulnerability...

Microsoft Dynamics Business Central 安全漏洞

Microsoft Dynamics Business Central is an enterprise resource planning system from Microsoft. The system includes features such as financial management, project management and supply chain management. An elevation of privilege vulnerability exists in Microsoft Dynamics Business Central, which can...

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses lies in improper code generation, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...