Medium severity6.5NVD Advisory· Published Aug 11, 2026· Updated Aug 13, 2026
CVE-2026-40375
CVE-2026-40375
Description
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
Affected products
4- cpe:2.3:a:microsoft:dynamics_365_business_central_2024:*:*:*:*:on-premise:*:*:*Range: >=25.1.25900
- cpe:2.3:a:microsoft:dynamics_365_business_central_2025:*:*:*:*:on-premise:*:*:*Range: >=26.0,<26.0.50788
- cpe:2.3:a:microsoft:dynamics_365_business_central_2026:*:*:*:*:on-premise:*:*:*Range: >=28.0,<28.0.50938
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40375nvdVendor Advisory
News mentions
1- Patch Tuesday - August 2026Rapid7 Blog · Aug 11, 2026