8.8
High
CVE-2026-100214 Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a…
Description
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Dynamics NAV 2017 1.0 | 1.0 → < 30713 | 30713 |
| Microsoft Dynamics NAV 2018 1.0 | 1.0 → < 11.0.50736.0 | 11.0.50736.0 |
References
- Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Dynamics NAV 2017
The 8 CVEs of Microsoft Dynamics NAV 2017 →
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network
6.5
Medium
CVE-2022-41127
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
8.5
High
CVE-2021-36946
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
5.4
Medium
CVE-2021-1724
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
6.1
Medium