CVE-2026-100214high8.8
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Impact
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
Source excerpt · microsoftAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · Microsoft Dynamics NAV 2017
Platforms: Windows Server 2012
| Version / range | Source status |
|---|---|
| 1.0 to before 30713 | affected |
Microsoft · Microsoft Dynamics NAV 2018
Platforms: Windows Server 2012
| Version / range | Source status |
|---|---|
| 1.0 to before 11.0.50736.0 | affected |
Original source description
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.