Vulnerability Details CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 52.9%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-40375
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2024:25.1.25900
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2024:25.10.37185
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2024:25.2.27999
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2024:25.3.29378
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2024:25.4.29727
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2024:25.5.31109
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2024:25.6.32556
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2024:25.7.33396
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2024:25.8.34727
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2024:25.9.36001
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2025:26.0
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2025:27.0
-
cpe:2.3:a:microsoft:dynamics_365_business_central_2026:28.0