CVE-2026-88131

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.

An attacker could remotely execute arbitrary code in the application context, potentially leading to full system compromise and data exfiltration.

Immediately apply available security updates for Microsoft Dataverse and restrict network access to the minimum required.