← Back

CVE-2026-40375

nvd nist
Published: Aug 11, 2026Modified: Aug 13, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: secure@microsoft.com (Secondary)

Description

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

Affected (4)

Microsoft
3 products
Dynamics 365 Business Central 2024
Dynamics 365 Business Central 2025
Dynamics 365 Business Central 2026
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Dynamics 365 Business Central 2024
From 25.1.25900
Microsoft
Dynamics 365 Business Central 2025
From 26.0 to 26.0.50788
Dynamics 365 Business Central 2025
From 27.0 to 27.0.50789
Dynamics 365 Business Central 2026
From 28.0 to 28.0.50938

Related CWEs

CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.