CVE-2026-65772 – Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
"A successful attack could turn authorized Dynamics 365 access into remote code execution, putting sensitive data and system integrity at risk."
Microsoft Dynamics 365 (on-premises) version 9.1 contains a remote code execution vulnerability caused by deserialization of untrusted data. An authorized attacker with low privileges can exploit the issue over a network with low attack complexity and without user interaction. Successful exploitation can have a high impact on confidentiality, integrity, and availability.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-502
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.