NCSC-2026-0424

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Microsoft Dynamics

view advisory published 2026-10-13

Microsoft heeft kwetsbaarheden verholpen in diverse Dynamics componenten.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2026-70213UShigh8.0—
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.
CVE-2026-105727UShigh8.8—
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
CVE-2026-102226UShigh8.8—
Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
CVE-2026-100214UShigh8.8—
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
CVE-2026-88131UScritical9.8—
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
CVE-2026-102848US——
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan