CVE-2026-100214 Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
PublishedDeserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
Product
7 published CVES affecting Microsoft Dynamics NAV 2017, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information t...
An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.