← Back to browse · API

CVE-2026-42898

Severity
CRITICAL
CVSS
9.9
EPSS
0.01194
Risk score
40.02
CISA KEV
No
PoC
No
Published
2026-05-12
Modified
2026-08-10
First seen
2026-08-06
Aliases
CNVD-2026-20792, EUVD-2026-29718, GHSA-F8W6-8HPV-RRJJ
Products
Microsoft Dynamics 365 (on-premises) 9.1, Microsoft:Microsoft Dynamics 365 (on-premises) version 9.1 9.0 <9.1.45.11
Sources
cnvd CNVD-2026-20792
euvd EUVD-2026-29718

Description

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

References