Vulnerability Details CVE-2026-40417
Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 14.2%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2026-40417
-
cpe:2.3:a:microsoft:dynamics_365_business_central:2024
-
cpe:2.3:a:microsoft:dynamics_365_business_central:2025
-
cpe:2.3:a:microsoft:dynamics_365_business_central:2026