Aug 2026: Microsoft Dynamics Business Central Information Disclosure Vulnerability
CVE-2026-40375 Published on August 11, 2026

Microsoft Dynamics Business Central Information Disclosure Vulnerability
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
PARTIAL

Weakness Type

What is an AuthZ Vulnerability?

The software does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVE-2026-40375 has been classified to as an AuthZ vulnerability or weakness.


Products Associated with CVE-2026-40375

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Affected Versions

Microsoft Dynamics NAV 2017: Microsoft Dynamics NAV 2018: