Topic

Microsoft Dynamics

Coverage tagged microsoft dynamics.

Articles: 1
Desk: 1

Data graphic: CVE-2026-55944, an unauthenticated remote code execution flaw in Dynamics NAV and Business Central On Premises, scores 9.8 CVSS 3.1, Critical : one crafted login request with no credentials triggers CWE-502 unsafe deserialization and code execution on the ERP host. Microsoft rates exploitation More Likely, there is no public PoC and it is not on CISA KEV as of mid-July; NAV 2018 is fixed from build 11.0.50704.0, Business Central SaaS is not listed as affected, and the advice is to apply the July 2026 updates and keep NAV / BC login endpoints off the internet.

stableResearch Microsoft Dynamics

CVE-2026-55944: Critical Unauthenticated RCE Hits Microsoft Dynamics NAV and Business Central On Premises

Patched in the record July 2026 Patch Tuesday, the flaw puts finance, supply-chain and operations systems at risk wherever ERP login endpoints remain reachable.

Jul 15 · 6 min