Dynamics 365 Business Central 2025 Wave 1 CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-40417

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central Dynamics 365 Business Central 2024 Dynamics 365 Business Central 2024 Wave 1 and 5 more

CVE-2025-29821

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central 2023 Dynamics 365 Business Central 2023 Wave 2 Dynamics 365 Business Central 2024 and 4 more

Page 1 of 1.