8.8
High
CVE-2026-77908 Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to…
Description
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Dynamics 365 Customer Engagement V9.1 9.0 | 9.0 → < 9.1.0048.0004 | 9.1.0048.0004 |