Security Updates for Microsoft Dynamics NAV 2017 (Oct 2026)

The Microsoft Dynamics NAV 2017 install is missing a security update. It is, therefore, affected by a vulnerability: - Deserialization of untrusted data allows an authorized attacker to execute code over a network. CVE-2026-100214 Note that Nessus has not attempted to exploit this issue but has...

Security Updates for Microsoft Dynamics NAV 2018 (Oct 2026)

The Microsoft Dynamics NAV 2018 install is missing a security update. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data allows an authorized attacker to execute code over a network. CVE-2026-100214 - Improper limitation of a pathname to a restricted...

Microsoft Dynamics NAV Privilege Escalation

The vulnerability of the integrated Microsoft Dynamics NAV enterprise management system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Microsoft Dynamics NAV Auth Bypass Info Disclosure

The vulnerability of the integrated business management system Microsoft Dynamics NAV lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

@adobe/helix-onedrive-cli (1.11.441), @adobe/helix-onedrive-support (12.4.13) +2 more potentially affected by CVE-2026-109461 via @azure/msal-node (7.0.1)

@azure/msal-node NPM version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @azure/msal-node and may be impacted: - @adobe/helix-onedrive-cli 1.11.441 - @adobe/helix-onedrive-support 12.4.13 - @mcp-sidekick/msx 1.0.0 - @tsg-ailab/dynamics-crm-mc...

CVE-2026-105727

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-105728

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network...

CVE-2026-102226

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-100214

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...

EUVD-2026-100375

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-102226

A path traversal vulnerability exists in Dynamics Business Central due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High), with impacts on confid...

CVE-2026-100214

Dynamics Business Central is vulnerable to a Remote Code Execution (RCE) flaw due to the deserialization of untrusted data . An authorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . Microsoft has ad...

EUVD-2026-100328

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...

EUVD-2026-99030

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network...

CVE-2026-105728

A vulnerability in Dynamics Business Central allows an unauthorized attacker to disclose information over a network due to improper authentication (CWE-306). The impact is characterized as a high confidentiality risk, as the flaw enables unauthorized information disclosure. No specific exploit de...

EUVD-2026-99029

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-105727

A path traversal vulnerability (CWE-22) exists in Microsoft Dynamics 365 Business Central . Due to an improper limitation of a pathname to a restricted directory, an authorized attacker can achieve elevation of privileges over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) ....

Vulnerabilities in Microsoft Dynamics

Microsoft has addressed vulnerabilities in various Dynamics components. A malicious individual could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the following tables: Microsoft Dataverse: | CVE-ID | CVSS | Impact | |--------|------|---------| |...

Dynamics Business Central Information Disclosure Vulnerability

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network...

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...