CVE-2026-42898: Critical Microsoft Dynamics 365 RCE Vulnerability (cve.org)
0xBASE INTEL BRIEF
- CVSS score 9.9 (critical)
- Code injection via process session data
- Only on-premises installations affected
"A critical code injection vulnerability (CVSS 9.9) in on-premises Microsoft Dynamics 365 allows authenticated attackers to execute arbitrary code via manipulated process session data. Tracked as CVE-2026-42898, the flaw affects only on-premises instances. Microsoft has released patches; immediate application is advised due to high risk of exploitation."
no comments yet.