CVE Catalog
CVE-2026-40375
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk0.79%
53th percentile - higher than 53% of all known CVEs
Summary
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
Risk Assessment
The risk of unauthorized access to business data by users with limited privileges.
Recommendation
Review and strengthen authorization mechanisms in Dynamics Business Central and apply relevant patches.
Original NVD description (English source)
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.