Security Advisory

CVE-2026-42898

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-12 16:59:06
Last updated 2026-06-19 16:12:38
Assigner microsoft
CVSS score 9.9
State PUBLISHED

Description

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.