CVE-2026-47647

Severity

CRITICAL

CVSS

9.9

EPSS

0.00778

Risk score

39.87

CISA KEV

PoC

Published

2026-06-18

Modified

2026-08-14

First seen

2026-08-07

Aliases

CNVD-2026-28160, EUVD-2026-37947, GHSA-VQ29-76J3-6VH5

Products

Microsoft Microsoft Dynamics 365, Microsoft:Microsoft Dynamics 365 -

Sources

Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.