Apr 2026: Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVE-2026-33103 Published on April 14, 2026

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.

Vendor Advisory NVD

Weakness Type

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2026-33103 has been classified to as an Authorization vulnerability or weakness.


Products Associated with CVE-2026-33103

Want to know whenever a new CVE is published for Microsoft Dynamics 365? stack.watch will email you.

 

Affected Versions

Microsoft Dynamics 365 (on-premises) version 9.0: