CVE-2026-100214

Microsoft · Published October 13, 2026

8.8

CVSS v3.1

HIGH

Patch availableGet patch

Description

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability. Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.

Affected Products

Microsoft Dynamics NAV 2017 on Windows Server 2012
Microsoft Dynamics NAV 2018 on Windows Server 2012

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C