PT-2026-40227 · Microsoft · Dynamics 365 Business Central

Nhien Pham + 1 · Published 2026-05-12 · Updated 2026-06-03 · CVE-2026-40417

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 Business Central (affected versions not specified)

Description Weak authentication procedures allow an authorized attacker to elevate privileges locally.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1390

Related Identifiers

BDU:2026-06798

CVE-2026-40417

Affected Products

Dynamics 365 Business Central

References · 4

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40417 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40417 · Security Note
• https://bdu.fstec.ru/vul/2026-06798 · Security Note
• https://t.me/cveNotify/165752 · Telegram Post