medium6.5
CVE-2026-40375
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
Impact
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Dynamics 365 Business Central 2024 | from 25.1.25900 |
| Microsoft | Dynamics 365 Business Central 2025 | from 26.0 before 26.0.50788 from 27.0 before 27.0.50789 |
| Microsoft | Dynamics 365 Business Central 2026 | from 28.0 before 28.0.50938 |