8.8
High
CVE-2026-105727 Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an…
Description
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Dynamics NAV 2018 1.0 | 1.0 → < 11.0.50736.0 | 11.0.50736.0 |
References
- Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Dynamics NAV 2018
The 13 CVEs of Microsoft Dynamics NAV 2018 →
CVE-2026-102226
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an…
8.8
High
CVE-2026-100214
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a…
8.8
High
CVE-2026-105728
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a…
7.5
High
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network
6.5
Medium