0x

guest@0xbase ~$ read-only mode. Posting requires EU location.

CVE-2026-42898: Critical Microsoft Dynamics 365 RCE Vulnerability (cve.org)

· 67d ago · Report · Spotlight this ·
0xBASE INTEL BRIEF
  • CVSS score 9.9 (critical)
  • Code injection via process session data
  • Only on-premises installations affected

"A critical code injection vulnerability (CVSS 9.9) in on-premises Microsoft Dynamics 365 allows authenticated attackers to execute arbitrary code via manipulated process session data. Tracked as CVE-2026-42898, the flaw affects only on-premises instances. Microsoft has released patches; immediate application is advised due to high risk of exploitation."

Discussion Matrix

0 segments

no comments yet.