Skip to content
OpenAdvisories
High WID-SEC-2026-3918 4 CVEs

Microsoft Dynamics: Mehrere Schwachstellen

Published Oct 13, 2026 · Updated Oct 13, 2026 · de-DE

Vendor: Microsoft Product: Dynamics 365 Product: Dynamics NAV 2017 Product: Dynamics NAV 2018 Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft Dynamics NAV 2017, Microsoft Dynamics NAV 2018 und Microsoft Dynamics 365 Business Central ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.

Product

Microsoft Dynamics NAV ist eine Standardsoftware für ERP-Systeme.
Microsoft Dynamics 365 ist eine All-in-One-Unternehmensmanagementlösung.

Vulnerabilities 4

  • High 8.8
    CVE-2026-100214

    Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

    Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.

    Microsoft Microsoft Dynamics NAV 2018 Microsoft Dynamics NAV 2017
  • High 8.8
    CVE-2026-102226

    Dynamics Business Central Elevation of Privilege Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Dynamics NAV 2018
  • High 8.8
    CVE-2026-105727

    Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

    External control of file name or path in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Dynamics NAV 2018
  • High 7.5
    CVE-2026-105728

    Dynamics Business Central Information Disclosure Vulnerability

    Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.

    Microsoft Microsoft Dynamics NAV 2018

Revision history

  1. #1

    Initiale Fassung

References