Security Updates for Microsoft Dynamics NAV 2018 (Oct 2026)

The Microsoft Dynamics NAV 2018 install is missing a security update. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data allows an authorized attacker to execute code over a network. CVE-2026-100214 - Improper limitation of a pathname to a restricted...

Security Updates for Microsoft Dynamics NAV 2017 (Oct 2026)

The Microsoft Dynamics NAV 2017 install is missing a security update. It is, therefore, affected by a vulnerability: - Deserialization of untrusted data allows an authorized attacker to execute code over a network. CVE-2026-100214 Note that Nessus has not attempted to exploit this issue but has...

Microsoft Dynamics NAV Auth Bypass Info Disclosure

The vulnerability of the integrated business management system Microsoft Dynamics NAV lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Microsoft Dynamics NAV Privilege Escalation

The vulnerability of the integrated Microsoft Dynamics NAV enterprise management system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

PT-2026-118112

Уязвимость интегрированной системы управления предприятием Microsoft Dynamics NAV связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

PT-2026-118114

Уязвимость интегрированной системы управления предприятием Microsoft Dynamics NAV связана с отсутствием аутентификации для критичной функции. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть защищаемую информацию...

Microsoft Dynamics NAV Code Execution

The vulnerability in the integrated enterprise management system of Microsoft Dynamics NAV is related to flaws in the deserialization mechanism. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

CVE-2026-55944

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network...

CVE-2026-55944

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network...

EUVD-2026-44229

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network...

CVE-2026-55944

CVE-2026-55944 affects Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises). The vulnerability is described as a deserialization of untrusted data in Dynamics NAV that could allow remote code execution over a network. Connected sources indicate this is addressed in Jul...

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network...

KLA91146 Multiple vulnerability in Microsoft Dynamics

Multiple vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to bypass security restrictions, execute arbitrary code. Original advisories CVE-2026-55944 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Dynamics-365 .NE...

CVE-2026-55944: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network...

PT-2026-58588

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network...

EUVD-2018-20262

Malware in sbrugna...

EUVD-2019-9230

Malware in sbrugna...

EUVD-2022-44370

Malicious code in bioql PyPI...

CVE-2019-19616

An Insecure Direct Object Reference IDOR vulnerability in the Xtivia Web Time and Expense WebTE interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary files by specifying arbitrary values for the recId and filename parameters of the /Home/GetAttachment...

Security Updates for Microsoft Dynamics NAV (Dec 2022)

The Microsoft Dynamics NAV install is missing a security update. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...