NCSC-2026-0238 [1.00] [M/H] Vulnerability fixed in Microsoft Dynamics
Microsoft has fixed a vulnerability in Dynamics NAV and 365 Business Central. An attacker can exploit the vulnerability to execute arbitrary code on the vulnerable system via a malicious login request. Because Dynamics has many publicly accessible interfaces and does not require user interaction, Microsoft expects active exploitation of this vulnerability. So far, no active exploitation has been observed, and there is also (yet) no Proof-of-Concept code (PoC) or exploit known. In particular, systems that are publicly accessible via the internet are at increased risk.
CSIRTS triage
- What
- A vulnerability allows an attacker to execute arbitrary code on the vulnerable system via a malicious login request.
- Who is affected
- Deployments of Dynamics NAV and 365 Business Central, especially those publicly accessible.
- Urgency
- Remediation is urgent due to the potential for active exploitation, although none has been observed yet.
- Action
- Apply the latest security updates provided by Microsoft.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Dynamics NAV and 365 Business Central
Get an email when a new Dynamics NAV and 365 Business Central advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0238
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Moderate exploitation riskCVE-2026-559441.3% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 67% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-55944 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Microsoft Dynamics NAV: Vulnerability allows code executioncert-bund
- unknownMultiple vulnerabilities in Microsoft products (July 15, 2026)cert-fr-avis
- criticalCVE-2026-55944: Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to…nvd
- criticalCVE-2026-55944: Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code E…msrc
Recent advisories for Microsoft Dynamics
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- high[NEW] [high] Microsoft Dynamics NAV: Vulnerability allows code executioncert-bund · 2026-07-15
- criticalCVE-2026-55944: Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to…nvd · 2026-07-14
- criticalCVE-2026-55944: Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code E…msrc · 2026-07-14
- high[UPDATE] [high] Microsoft Dynamics 365: Vulnerability allows Cross-Site Scriptingcert-bund · 2026-07-09
- highCVE-2026-40371: Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerabilitymsrc · 2026-06-09
More from NCSC-NL Advisories
- unknownNCSC-2026-0274 [1.00] [M/H] Kwetsbaarheid verholpen in SolarWinds Web Help Desk2026-07-31
- unknownNCSC-2026-0273 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Campaign Classic2026-07-31
- unknownNCSC-2026-0272 [1.00] [M/H] Kwetsbaarheden verholpen in JFrog Artifactory2026-07-31
- unknownNCSC-2026-0271 [1.00] [M/H] Vulnerability fixed in Cisco Secure Firewall Management Center2026-07-30
- unknownNCSC-2026-0270 [1.00] [M/M] Vulnerabilities fixed in GitLab by GitLab Inc.2026-07-30