Aug 2026: Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2026-65815 Published on August 11, 2026

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

Vendor Advisory NVD

Weakness Type

What is a Marshaling, Unmarshaling Vulnerability?

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

CVE-2026-65815 has been classified to as a Marshaling, Unmarshaling vulnerability or weakness.


Products Associated with CVE-2026-65815

Want to know whenever a new CVE is published for Microsoft Dynamics 365? stack.watch will email you.

 

Affected Versions

Microsoft Dynamics 365 (on-premises) version 9.1: