Dynamics Nav 2017 CVEs and Security Vulnerabilities

CVE-2026-40375

Microsoft Dynamics Business Central Information Disclosure Vulnerability

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central 2023 Wave 2 Dynamics 365 Business Central 2024 Dynamics 365 Business Central 2024 Wave 1 and 5 more

CVE-2026-100214

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS 2.1% KEV · Not listed

Vendors

Microsoft

Products

Dynamics Nav 2017 Dynamics Nav 2018

CVE-2021-36946

CVSS 3.1 · 5.4 Medium EPSS 1.0% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central Dynamics 365 Business Central 2019 Dynamics 365 Business Central 2020 and 3 more

CVE-2022-41127

CVSS 3.1 · 8.5 High EPSS 1.7% KEV · Not listed

Vendors

Microsoft

Products

Dynamics 365 Business Central Dynamics 365 Business Central 2019 Dynamics 365 Business Central 2020 and 8 more