CVE-2026-66301

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

CVE-2026-65815

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

CVE-2026-40375

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

EUVD-2026-56566

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

CVE-2026-66301

The provided connected records identify CVE-2026-66301 as an information disclosure vulnerability affecting Microsoft Dynamics 365 (on-premises). The attack surface involves a network exposure where an unauthorized actor can disclose sensitive information. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N...

CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

...

CVE-2026-65815

CVE-2026-65815 affects Microsoft Dynamics 365 On-Premises. The vulnerability arises from deserialization of untrusted data, enabling an authenticated attacker to execute code remotely over a network. Affected component is the on-premises Dynamics 365 deployment; the underlying root cause is impro...

CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

EUVD-2026-56449

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

CVE-2026-40375

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

CVE-2026-40375

CVE-2026-40375 affects Microsoft Dynamics Business Central. Missing authorization could allow an authorized attacker to disclose information over a network. The NVD records a CVSSv3.1 base score of 6.5 (MEDIUM) with Network impact, low attack complexity, and low privileges required; confidentiali...

CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability

...

CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability

...

EUVD-2026-56299

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

Update 27.8 for Microsoft Dynamics 365 Business Central 2025 Release Wave 2 (Application Build 27.8.50894, Platform Build 27.0.50789)

Update 27.8 for Microsoft Dynamics 365 Business Central 2025 Release Wave 2 Application Build 27.8.50894, Platform Build 27.0.50789 Applies To Dynamics 365 Business Central on-premises Overview This update replaces previously released updates. You should always install the latest update. After yo...