CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability

...

CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability

...

CVE-2026-40375

CVE-2026-40375 affects Microsoft Dynamics Business Central. Missing authorization could allow an authorized attacker to disclose information over a network. The NVD records a CVSSv3.1 base score of 6.5 (MEDIUM) with Network impact, low attack complexity, and low privileges required; confidentiali...

CVE-2026-40375

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

EUVD-2026-56299

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

Update 27.8 for Microsoft Dynamics 365 Business Central 2025 Release Wave 2 (Application Build 27.8.50894, Platform Build 27.0.50789)

None None...

Update 28.2 for Microsoft Dynamics 365 Business Central 2026 Release Wave 1 (Application Build 28.2.51034, Platform Build 28.0.50938)

None None...

Update 26.14 for Microsoft Dynamics 365 Business Central 2025 Release Wave 1 (Application Build 26.14.50858, Platform Build 26.0.50788)

None None...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

CVE-2026-40375: Missing Authorization

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

PT-2026-70367

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

CVE-2026-66301: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

PT-2026-70700

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

PT-2026-70699

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

CVE-2026-65815: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

KLA91208 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft...

Microsoft Dynamics NAV Code Execution

The vulnerability of the integrated business management system Microsoft Dynamics NAV is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

KLA91192 PE vulnerability in Microsoft Dynamics

Privilege escalation vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-59118 Exploitation Related products .NET Microsoft-Power-Apps-Desktop-Client CVE list CVE-2026-59118 unknown KB list Solution Install...