306 matches found
Security Updates for Microsoft Dynamics 365 Business Central (August 2026)
The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to missing authorization. An authenticated, remote attacker can exploit this, to disclose potentially sensitive information. Note that Nessus...
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
CVE-2026-40375
CVE-2026-40375 affects Microsoft Dynamics Business Central. Missing authorization could allow an authorized attacker to disclose information over a network. The NVD records a CVSSv3.1 base score of 6.5 (MEDIUM) with Network impact, low attack complexity, and low privileges required; confidentiali...
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
EUVD-2026-56299
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
Update 27.8 for Microsoft Dynamics 365 Business Central 2025 Release Wave 2 (Application Build 27.8.50894, Platform Build 27.0.50789)
None None...
Update 28.2 for Microsoft Dynamics 365 Business Central 2026 Release Wave 1 (Application Build 28.2.51034, Platform Build 28.0.50938)
None None...
Microsoft Dynamics Business Central Information Disclosure Vulnerability
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
PT-2026-70367
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
CVE-2026-40375: Missing Authorization
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...
CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
...
CVE-2026-55944
CVE-2026-55944 affects Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises). The vulnerability is described as a deserialization of untrusted data in Dynamics NAV that could allow remote code execution over a network. Connected sources indicate this is addressed in Jul...
CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
...
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network...
Security Updates for Microsoft Dynamics 365 Business Central (May 2026) (CVE-2026-40417)
The Microsoft Dynamics 365 Business Central install is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability: - Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally. CVE-2026-40417 Note that Nessus...
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from deficiencies in the authentication process, which allows attackers to escalate their privileges.
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges...
