fr Sign in

9.8 Critical

CVE-2026-55944 Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a…

Description

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Dynamics NAV 2018 1.0	1.0 → < 11.0.50704.0	11.0.50704.0

References

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability msrc.microsoft.com

Timeline

Published July 14, 2026
Last modified November 1, 2026

The 13 CVEs of Microsoft Dynamics NAV 2018 →

CVE-2026-102226 Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an… 8.8 High CVE-2026-100214 Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a… 8.8 High CVE-2026-105728 Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a… 7.5 High CVE-2026-105727 Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an… 8.8 High

Track this CVE