ZeroDay Findings
Sign inSign up

Findings

CVE-2026-40417

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

Published May 12, 2026 · updated Aug 10, 2026 · microsoft dynamics 365 business central

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 12, 2026 · NIST NVD

    Detected

    Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

  2. Aug 10, 2026 · NIST NVD

    Updated

    Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

Affected

  • cpe microsoft/dynamics 365 business central2024
  • cpe microsoft/dynamics 365 business central2025
  • cpe microsoft/dynamics 365 business central2026

Sources

  • CVE.orgVulnerability recordCVE-2026-40417

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-40417

    Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

    nvd.nist.gov

References