Oct 2026: Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
CVE-2026-100214 Published on October 13, 2026

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL

Weakness Type

What is a Marshaling, Unmarshaling Vulnerability?

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

CVE-2026-100214 has been classified to as a Marshaling, Unmarshaling vulnerability or weakness.


Products Associated with CVE-2026-100214

stack.watch emails you whenever new vulnerabilities are published in Microsoft Dynamics Nav 2017 or Microsoft Dynamics Nav 2018. Just hit a watch button to start following.

Affected Versions

Microsoft Dynamics NAV 2017: Microsoft Dynamics NAV 2018: