Skip to main content

Microsoft Dynamics 365 Business Central 2024 Release Wave 2 EUVDEUVD-2026-29674

| CVE-2026-40417 HIGH
Weak Authentication (CWE-1390)
2026-05-12 microsoft GHSA-x37p-2fc6-57xh
Information Disclosure Microsoft Dynamics 365 Business Central 2024 Release Wave 2 Microsoft Dynamics 365 Business Central 2026 Release Wave 1 Microsoft Dynamics 365 Business Central Release Wave 1 2025 Microsoft Dynamics 365 Business Central Release Wave 2 2025
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ENISA EUVD
HIGH
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 12, 2026 - 16:58 nvd
HIGH 7.8

DescriptionCVE.org

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

Analysis

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

Same weakness CWE-1390 – Weak Authentication

View all
CVE-2025-40552 CRITICAL POC
9.8
CVE-2025-40554 CRITICAL POC
9.8
CVE-2026-55040 CRITICAL
9.1
CVE-2024-34451 CRITICAL POC
9.1
CVE-2024-36787 HIGH POC
8.8
CVE-2024-0822 HIGH POC
7.5
CVE-2025-24070 HIGH POC
7.0
CVE-2025-30412 CRITICAL
10.0

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

EUVD-2026-29674 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy