Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-55944 (GCVE-0-2026-55944)
Vulnerability from cvelistv5 – Published: 2026-07-14 17:09 – Updated: 2026-07-14 19:41
VLAI
EPSS
VEX
Title
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Summary
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft Dynamics NAV 2018 |
Affected:
1.0 , < 11.0.50704.0
(custom)
|
Date Public
2026-07-14 14:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-55944",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-14T18:01:05.898620Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T18:01:12.962Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Microsoft Dynamics NAV 2018",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "11.0.50704.0",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:dynamics_nav_2018:*:*:*:*:*:*:*:*",
"versionEndExcluding": "11.0.50704.0",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2026-07-14T14:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502: Deserialization of Untrusted Data",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T19:41:20.830Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability",
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"
}
],
"title": "Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2026-55944",
"datePublished": "2026-07-14T17:09:10.942Z",
"dateReserved": "2026-06-17T17:37:17.983Z",
"dateUpdated": "2026-07-14T19:41:20.830Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-55944",
"date": "2026-07-15",
"epss": "0.01309",
"percentile": "0.67348"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-55944\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2026-07-14T18:18:21.850\",\"lastModified\":\"2026-07-14T20:35:32.720\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.\"}],\"affected\":[{\"source\":\"secure@microsoft.com\",\"affectedData\":[{\"vendor\":\"Microsoft\",\"product\":\"Microsoft Dynamics NAV 2018\",\"versions\":[{\"version\":\"1.0\",\"lessThan\":\"11.0.50704.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-14T18:01:05.898620Z\",\"id\":\"CVE-2026-55944\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-502\"}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944\",\"source\":\"secure@microsoft.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-55944\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-14T18:01:05.898620Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-14T18:01:08.679Z\"}}], \"cna\": {\"title\": \"Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Microsoft Dynamics NAV 2018\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.0\", \"lessThan\": \"11.0.50704.0\", \"versionType\": \"custom\"}]}], \"datePublic\": \"2026-07-14T14:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944\", \"name\": \"Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-502\", \"description\": \"CWE-502: Deserialization of Untrusted Data\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:dynamics_nav_2018:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"11.0.50704.0\", \"versionStartIncluding\": \"1.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2026-07-14T18:44:21.325Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-55944\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-14T18:44:21.325Z\", \"dateReserved\": \"2026-06-17T17:37:17.983Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2026-07-14T17:09:10.942Z\", \"assignerShortName\": \"microsoft\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-0872
Vulnerability from certfr_avis - Published: 2026-07-15 - Updated: 2026-07-15
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Microsoft indique que la vulnérabilité CVE-2026-56164 est activement exploitée.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft.AspNet.OData versions antérieures à 7.8.0 | ||
| Microsoft | N/A | Microsoft Copilot | ||
| Microsoft | N/A | Surface Laptop 4 with Intel Processor | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (CU 31) versions antérieures à 14.0.3540.1 | ||
| Microsoft | N/A | Visual Studio Code versions antérieures à 1.128.1 | ||
| Microsoft | N/A | Microsoft SQL Server 2017 pour systèmes x64 (GDR) versions antérieures à 14.0.2120.1 | ||
| Microsoft | N/A | Microsoft Dynamics NAV 2018 versions antérieures à 11.0.50704.0 | ||
| Microsoft | N/A | Microsoft Surface Laptop Go 3 | ||
| Microsoft | N/A | Microsoft SharePoint Server 2019 versions antérieures à 16.0.10417.20153 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2509 versions antérieures à 2509 | ||
| Microsoft | N/A | Microsoft SharePoint Server 2019 versions antérieures à 16.0.10417.20175 | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.19725.20434 | ||
| Microsoft | N/A | Microsoft Surface Pro 7+ | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 15 versions antérieures à 15.02.1748.048 | ||
| Microsoft | N/A | Microsoft SharePoint Enterprise Server 2016 versions antérieures à 16.0.5561.1001 | ||
| Microsoft | N/A | Surface Laptop 4 with AMD Processor | ||
| Microsoft | N/A | Power BI Report Server versions antérieures à 15.0.1121.120 | ||
| Microsoft | N/A | Microsoft Visual Studio 2026 version 18.7 antérieures à 18.7.4 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.14 antérieures à 17.14.36 | ||
| Microsoft | N/A | Microsoft SharePoint Enterprise Server 2016 versions antérieures à 16.0.5556.1005 | ||
| Microsoft | N/A | Fabric Data Warehouse versions antérieures à 8.0.206.113 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2503 versions antérieures à 2503 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (CU 32) versions antérieures à 15.0.4480.2 | ||
| Microsoft | N/A | Microsoft Malware Protection Engine versions antérieures à 1.1.26060.3008 | ||
| Microsoft | N/A | Microsoft Bing Search pour iOS versions antérieures à 33.4.440529002 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (GDR) versions antérieures à 16.0.1190.2 | ||
| Microsoft | N/A | Microsoft Surface Hub 3 | ||
| Microsoft | N/A | Microsoft SQL Server 2016 pour systèmes x64 Service Pack 3 Azure Connect Feature Pack versions antérieures à 13.0.7095.1 | ||
| Microsoft | N/A | Microsoft Surface Go 2 | ||
| Microsoft | N/A | Microsoft Surface Hub | ||
| Microsoft | N/A | Microsoft PC Manager versions antérieures à 3.21.6.0 | ||
| Microsoft | N/A | Microsoft Surface Go 3 | ||
| Microsoft | N/A | Microsoft Configuration Manager 2603 versions antérieures à 2603 | ||
| Microsoft | N/A | Microsoft.AspNetCore.OData versions antérieures à 9.5.0[SX1] | ||
| Microsoft | N/A | Microsoft SharePoint Server Subscription Edition versions antérieures à 16.0.19725.20384 | ||
| Microsoft | N/A | Microsoft Surface Hub 2S | ||
| Microsoft | N/A | GitHub Copilot Plugin pour JetBrains IDEs versions antérieures à 1.13.0-251 | ||
| Microsoft | N/A | Microsoft SQL Server 2016 pour systèmes x64 Service Pack 3 (GDR) versions antérieures à 13.0.6500.1 | ||
| Microsoft | N/A | Microsoft Exchange Server 2019 Cumulative Update 14 versions antérieures à 15.02.1544.043 | ||
| Microsoft | N/A | Microsoft Surface Pro 8 | ||
| Microsoft | N/A | Microsoft SQL Server 2022 pour systèmes x64 (CU 25) versions antérieures à 16.0.4262.2 | ||
| Microsoft | N/A | Microsoft PC Manager versions antérieures à 3.22.1.0 | ||
| Microsoft | N/A | Microsoft Surface Laptop Go | ||
| Microsoft | N/A | Microsoft Defender pour Endpoint pour Mac versions antérieures à 101.26042.0020 | ||
| Microsoft | N/A | Microsoft Visual Studio 2022 version 17.12 antérieures à 17.12.22 | ||
| Microsoft | N/A | Microsoft SQL Server 2019 pour systèmes x64 (GDR) versions antérieures à 15.0.2180.2 | ||
| Microsoft | N/A | Microsoft Exchange Server 2016 Cumulative Update 23 versions antérieures à 15.01.2507.071 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (CU6) versions antérieures à 17.0.4060.2 | ||
| Microsoft | N/A | Microsoft Surface Laptop Go 2 | ||
| Microsoft | N/A | Microsoft SQL Server 2025 pour systèmes x64 (GDR) versions antérieures à 17.0.1125.2 | ||
| Microsoft | N/A | Age of Empires II: Definitive Edition Game versions antérieures à 101.103.46651.0 | ||
| Microsoft | N/A | Microsoft Exchange Server Subscription Edition RTM versions antérieures à 15.02.2562.045 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft.AspNet.OData versions ant\u00e9rieures \u00e0 7.8.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Copilot",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Surface Laptop 4 with Intel Processor",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU 31) versions ant\u00e9rieures \u00e0 14.0.3540.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Visual Studio Code versions ant\u00e9rieures \u00e0 1.128.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2120.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Dynamics NAV 2018 versions ant\u00e9rieures \u00e0 11.0.50704.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Laptop Go 3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20153",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2509 versions ant\u00e9rieures \u00e0 2509",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10417.20175",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19725.20434",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Pro 7+",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 15 versions ant\u00e9rieures \u00e0 15.02.1748.048",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5561.1001",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Surface Laptop 4 with AMD Processor",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Power BI Report Server versions ant\u00e9rieures \u00e0 15.0.1121.120",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2026 version 18.7 ant\u00e9rieures \u00e0 18.7.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.14 ant\u00e9rieures \u00e0 17.14.36",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5556.1005",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Fabric Data Warehouse versions ant\u00e9rieures \u00e0 8.0.206.113",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2503 versions ant\u00e9rieures \u00e0 2503",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU 32) versions ant\u00e9rieures \u00e0 15.0.4480.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Malware Protection Engine versions ant\u00e9rieures \u00e0 1.1.26060.3008",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Bing Search pour iOS versions ant\u00e9rieures \u00e0 33.4.440529002",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1190.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Hub 3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 Azure Connect Feature Pack versions ant\u00e9rieures \u00e0 13.0.7095.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Go 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Hub",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PC Manager versions ant\u00e9rieures \u00e0 3.21.6.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Go 3",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Configuration Manager 2603 versions ant\u00e9rieures \u00e0 2603",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft.AspNetCore.OData versions ant\u00e9rieures \u00e0 9.5.0[SX1]",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.19725.20384",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Hub 2S",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "GitHub Copilot Plugin pour JetBrains IDEs versions ant\u00e9rieures \u00e0 1.13.0-251",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 (GDR) versions ant\u00e9rieures \u00e0 13.0.6500.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2019 Cumulative Update 14 versions ant\u00e9rieures \u00e0 15.02.1544.043",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Pro 8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU 25) versions ant\u00e9rieures \u00e0 16.0.4262.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft PC Manager versions ant\u00e9rieures \u00e0 3.22.1.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Laptop Go",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Defender pour Endpoint pour Mac versions ant\u00e9rieures \u00e0 101.26042.0020",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Visual Studio 2022 version 17.12 ant\u00e9rieures \u00e0 17.12.22",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2180.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server 2016 Cumulative Update 23 versions ant\u00e9rieures \u00e0 15.01.2507.071",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (CU6) versions ant\u00e9rieures \u00e0 17.0.4060.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Surface Laptop Go 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft SQL Server 2025 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 17.0.1125.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Age of Empires II: Definitive Edition Game versions ant\u00e9rieures \u00e0 101.103.46651.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft Exchange Server Subscription Edition RTM versions ant\u00e9rieures \u00e0 15.02.2562.045",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-55030",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55030"
},
{
"name": "CVE-2026-55134",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55134"
},
{
"name": "CVE-2026-55020",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55020"
},
{
"name": "CVE-2026-45646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45646"
},
{
"name": "CVE-2026-50657",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50657"
},
{
"name": "CVE-2026-50524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50524"
},
{
"name": "CVE-2026-55130",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55130"
},
{
"name": "CVE-2026-55142",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55142"
},
{
"name": "CVE-2026-55944",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55944"
},
{
"name": "CVE-2026-55002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55002"
},
{
"name": "CVE-2026-50522",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50522"
},
{
"name": "CVE-2026-55009",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55009"
},
{
"name": "CVE-2026-57101",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57101"
},
{
"name": "CVE-2026-56642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56642"
},
{
"name": "CVE-2026-56178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56178"
},
{
"name": "CVE-2026-55033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55033"
},
{
"name": "CVE-2026-56157",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56157"
},
{
"name": "CVE-2026-55026",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55026"
},
{
"name": "CVE-2026-50510",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50510"
},
{
"name": "CVE-2026-55038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55038"
},
{
"name": "CVE-2026-47282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47282"
},
{
"name": "CVE-2026-50526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50526"
},
{
"name": "CVE-2026-55021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55021"
},
{
"name": "CVE-2026-45496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45496"
},
{
"name": "CVE-2026-55055",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55055"
},
{
"name": "CVE-2026-55028",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55028"
},
{
"name": "CVE-2026-55045",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55045"
},
{
"name": "CVE-2026-55051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55051"
},
{
"name": "CVE-2026-55135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55135"
},
{
"name": "CVE-2026-55035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55035"
},
{
"name": "CVE-2026-55008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55008"
},
{
"name": "CVE-2026-55019",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55019"
},
{
"name": "CVE-2026-47305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47305"
},
{
"name": "CVE-2026-55016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55016"
},
{
"name": "CVE-2026-58595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58595"
},
{
"name": "CVE-2026-47303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47303"
},
{
"name": "CVE-2026-47295",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47295"
},
{
"name": "CVE-2026-50468",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50468"
},
{
"name": "CVE-2026-50663",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50663"
},
{
"name": "CVE-2026-55047",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55047"
},
{
"name": "CVE-2026-55011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55011"
},
{
"name": "CVE-2026-55052",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55052"
},
{
"name": "CVE-2026-50650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50650"
},
{
"name": "CVE-2026-55128",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55128"
},
{
"name": "CVE-2026-55145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55145"
},
{
"name": "CVE-2026-55006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55006"
},
{
"name": "CVE-2026-55012",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55012"
},
{
"name": "CVE-2026-47296",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47296"
},
{
"name": "CVE-2026-57102",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57102"
},
{
"name": "CVE-2026-47304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47304"
},
{
"name": "CVE-2026-50527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50527"
},
{
"name": "CVE-2026-55027",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55027"
},
{
"name": "CVE-2026-55032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55032"
},
{
"name": "CVE-2026-55126",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55126"
},
{
"name": "CVE-2026-58647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58647"
},
{
"name": "CVE-2026-55050",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55050"
},
{
"name": "CVE-2026-56164",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56164"
},
{
"name": "CVE-2026-50506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50506"
},
{
"name": "CVE-2026-50525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50525"
},
{
"name": "CVE-2026-48581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48581"
},
{
"name": "CVE-2026-55034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55034"
},
{
"name": "CVE-2026-55124",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55124"
},
{
"name": "CVE-2026-54108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54108"
},
{
"name": "CVE-2026-50520",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50520"
},
{
"name": "CVE-2026-50528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50528"
},
{
"name": "CVE-2026-58636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58636"
},
{
"name": "CVE-2026-55127",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55127"
},
{
"name": "CVE-2026-55121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55121"
},
{
"name": "CVE-2026-47302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47302"
},
{
"name": "CVE-2026-56192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56192"
},
{
"name": "CVE-2026-47301",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47301"
},
{
"name": "CVE-2026-50646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50646"
},
{
"name": "CVE-2026-50648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50648"
},
{
"name": "CVE-2026-50438",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50438"
},
{
"name": "CVE-2026-55132",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55132"
},
{
"name": "CVE-2026-55125",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55125"
},
{
"name": "CVE-2026-55040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55040"
},
{
"name": "CVE-2026-55023",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55023"
},
{
"name": "CVE-2026-54116",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54116"
},
{
"name": "CVE-2026-55005",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55005"
},
{
"name": "CVE-2026-50659",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50659"
},
{
"name": "CVE-2026-54118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54118"
},
{
"name": "CVE-2026-47300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47300"
},
{
"name": "CVE-2026-50651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50651"
},
{
"name": "CVE-2026-50658",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50658"
},
{
"name": "CVE-2026-58644",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58644"
},
{
"name": "CVE-2026-50649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50649"
},
{
"name": "CVE-2026-54117",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54117"
},
{
"name": "CVE-2026-58277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58277"
}
],
"initial_release_date": "2026-07-15T00:00:00",
"last_revision_date": "2026-07-15T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0872",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nMicrosoft indique que la vuln\u00e9rabilit\u00e9 CVE-2026-56164 est activement exploit\u00e9e.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
"vendor_advisories": [
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50649",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55130",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55130"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50658",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50658"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54108"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47296",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47296"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54118",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55124",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55124"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55132",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55132"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57102",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57102"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54116",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54116"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55142",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55142"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47282",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47282"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55126",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55126"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58647",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58647"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50650",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-57101",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57101"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54118",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-45496",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45496"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55127",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55127"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50527",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55032",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55032"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50526",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55002",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55002"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47302",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50506",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50506"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50520",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50520"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55038",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55038"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55021"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55121",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55121"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55006",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55006"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58277",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58277"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55134",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55134"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55027",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55027"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55035",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55035"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55128",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55128"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55055",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55055"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47305",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47305"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50438",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50438"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55135",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55135"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58636",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58636"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58595",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55019",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55019"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55023",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55023"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50648",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55009",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55009"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55026",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55026"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55045",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55045"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56157",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56157"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50528",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50651",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55033",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55033"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55016",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55016"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55944",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47300",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55030",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55030"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55012",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55012"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47295",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47295"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50510",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50510"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55125",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55125"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-58644",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50659",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47303",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-54117",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54117"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56164",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55011",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55011"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55052",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55052"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56192",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56192"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55008",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55008"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56642",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56642"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50525",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55028",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55028"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-45646",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45646"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50522",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55051",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55051"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-56178",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56178"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-48581",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50657",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55047",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55047"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50468",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50468"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47304",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55145",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55145"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55040",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50663",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50663"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-47301",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47301"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55034",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55034"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55005",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55005"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-50524",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55050",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55050"
},
{
"published_at": "2026-07-14",
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2026-55020",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55020"
}
]
}
FKIE_CVE-2026-55944
Vulnerability from fkie_nvd - Published: 2026-07-14 18:18 - Updated: 2026-07-14 20:35
Severity
Summary
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"product": "Microsoft Dynamics NAV 2018",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "11.0.50704.0",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
],
"source": "secure@microsoft.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network."
}
],
"id": "CVE-2026-55944",
"lastModified": "2026-07-14T20:35:32.720",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "secure@microsoft.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-55944",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-14T18:01:05.898620Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-07-14T18:18:21.850",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-502"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
}
GHSA-RVMX-R962-429W
Vulnerability from github – Published: 2026-07-14 18:32 – Updated: 2026-07-14 18:32
VLAI
Details
Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.
Severity
9.8 (Critical)
{
"affected": [],
"aliases": [
"CVE-2026-55944"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-07-14T18:18:21Z",
"severity": "CRITICAL"
},
"details": "Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.",
"id": "GHSA-rvmx-r962-429w",
"modified": "2026-07-14T18:32:36Z",
"published": "2026-07-14T18:32:36Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55944"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
MSRC_CVE-2026-55944
Vulnerability from csaf_microsoft - Published: 2026-07-14 07:00 - Updated: 2026-07-14 07:00Summary
Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
Severity
Critical
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.
9.8 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Dynamics NAV 2018 11.0.50704.0
Microsoft Dynamics NAV 2018
|
11.0.50704.0 |
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft Dynamics NAV 2018 <11.0.50704.0
Microsoft Dynamics NAV 2018
|
<11.0.50704.0 |
Vendor Fix
fix
|
Threats
Impact
Remote Code Execution
Exploit Status
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely
References
7 references
| URL | Category |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | self |
| https://msrc.microsoft.com/csaf/advisories/2026/m… | self |
| https://www.microsoft.com/en-us/msrc/exploitabili… | external |
| https://support.microsoft.com/lifecycle | external |
| https://www.first.org/cvss | external |
| https://msrc.microsoft.com/update-guide/vulnerabi… | self |
| https://msrc.microsoft.com/csaf/advisories/2026/m… | self |
Acknowledgments
<a href="https://www.linkedin.com/in/john-nzyuko-412b563b1/">John Nzyuko</a>
{
"document": {
"acknowledgments": [
{
"names": [
"\u003ca href=\"https://www.linkedin.com/in/john-nzyuko-412b563b1/\"\u003eJohn Nzyuko\u003c/a\u003e"
]
}
],
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"
},
{
"category": "self",
"summary": "CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-55944.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability",
"tracking": {
"current_release_date": "2026-07-14T07:00:00.000Z",
"generator": {
"date": "2026-07-14T20:05:38.243Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2026-55944",
"initial_release_date": "2026-07-14T07:00:00.000Z",
"revision_history": [
{
"date": "2026-07-14T07:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c11.0.50704.0",
"product": {
"name": "Microsoft Dynamics NAV 2018 \u003c11.0.50704.0",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "11.0.50704.0",
"product": {
"name": "Microsoft Dynamics NAV 2018 11.0.50704.0",
"product_id": "11746"
}
}
],
"category": "product_name",
"name": "Microsoft Dynamics NAV 2018"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-55944",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
},
{
"category": "faq",
"text": "An attacker could exploit this vulnerability by sending a specially crafted login request to an affected Dynamics NAV or Business Central server. Successful exploitation could allow the attacker to execute arbitrary code on the target system. Authentication and user interaction are not required.",
"title": "How could an attacker exploit this vulnerability?"
}
],
"product_status": {
"fixed": [
"11746"
],
"known_affected": [
"1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"
},
{
"category": "self",
"summary": "CVE-2026-55944 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-55944.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-14T07:00:00.000Z",
"details": "11.0.50704.0:Security Update:https://support.microsoft.com/en-US/servicing/dynamics/nav/update/2022/12/cumulative-update-60-for-microsoft-dynamics-nav-2018-build-49618",
"product_ids": [
"1"
],
"url": "https://support.microsoft.com/en-US/servicing/dynamics/nav/update/2022/12/cumulative-update-60-for-microsoft-dynamics-nav-2018-build-49618"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"environmentalScore": 0.0,
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 8.5,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Remote Code Execution"
},
{
"category": "exploit_status",
"details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"
}
],
"title": "Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability"
}
]
}
NCSC-2026-0238
Vulnerability from csaf_ncscnl - Published: 2026-07-14 18:42 - Updated: 2026-07-14 18:42Summary
Kwetsbaarheid verholpen in Microsoft Dynamics
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Microsoft heeft een kwetsbaarheid verholpen in Dynamics NAV en 365 Business Central.
Interpretaties: Een kwaadwillende kan de kwetsbaarheid misbruiken om middels een malafide login-request willekeurige code uit te voeren op het kwetsbare systeem.
Omdat Dynamics veelvuldig publiek toegankelijke interfaces heeft en verder geen gebruikersinteractie benodigd is, verwacht Microsoft actief misbruik van deze kwetsbaarheid. Vooralsnog is geen actief misbruik waargenomen en er is ook (nog) geen Proof-of-Concept-code (PoC) of exploit bekend.
Met name systemen die publiek, via internet toegankelijk zijn lopen hierdoor verhoogd risico.
Oplossingen: Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:
https://portal.msrc.microsoft.com/en-us/security-guidance
Kans: medium
Schade: high
CWE-502: Deserialization of Untrusted Data
A deserialization vulnerability in Microsoft Dynamics NAV allows unauthorized remote code execution via untrusted data.
9.8 (Critical)
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Microsoft / Microsoft Dynamics NAV 2018
|
vers:unknown/* |
References
1 reference
| URL | Category |
|---|---|
| https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Microsoft heeft een kwetsbaarheid verholpen in Dynamics NAV en 365 Business Central.",
"title": "Feiten"
},
{
"category": "description",
"text": "Een kwaadwillende kan de kwetsbaarheid misbruiken om middels een malafide login-request willekeurige code uit te voeren op het kwetsbare systeem. \n\nOmdat Dynamics veelvuldig publiek toegankelijke interfaces heeft en verder geen gebruikersinteractie benodigd is, verwacht Microsoft actief misbruik van deze kwetsbaarheid. Vooralsnog is geen actief misbruik waargenomen en er is ook (nog) geen Proof-of-Concept-code (PoC) of exploit bekend.\n\nMet name systemen die publiek, via internet toegankelijk zijn lopen hierdoor verhoogd risico.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:\n\nhttps://portal.msrc.microsoft.com/en-us/security-guidance",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"title": "Kwetsbaarheid verholpen in Microsoft Dynamics",
"tracking": {
"current_release_date": "2026-07-14T18:42:05.194911Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0238",
"initial_release_date": "2026-07-14T18:42:05.194911Z",
"revision_history": [
{
"date": "2026-07-14T18:42:05.194911Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Microsoft Dynamics NAV 2018"
}
],
"category": "vendor",
"name": "Microsoft"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-55944",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "description",
"text": "A deserialization vulnerability in Microsoft Dynamics NAV allows unauthorized remote code execution via untrusted data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-55944 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-55944.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-55944"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…