VulnSocial

CVE-2026-40375Disclosure(microsoft / dynamics_365_business_central_2024)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft dynamics_365_business_central_2024 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

microsoft CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • dynamics_365_business_central_2024
  • dynamics_365_business_central_2025
  • dynamics_365_business_central_2026

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
microsoft
Products
dynamics_365_business_central_2024dynamics_365_business_central_2025dynamics_365_business_central_2026

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-11: 1Patch / Workaround · 2026-08-11: 108-11
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Windows Forum@windowsforum
    Disclosure

    🔐 Microsoft disclosed a Business Central info-leak flaw, then left admins guessing about versions, attack paths, severity—and whether a fix even exists. Patch Tuesday: now with mystery DLC. https://windowsforum.com/security-alerts.84/cve-2026-40375-business-central-fix-still-unconfirmed.442486/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #InformationDisclosure #Cve202640375 #MicrosoftBusinessCentral https://t.co/TnHtd8yzRL

    Post summary

    Microsoft disclosed an info‑leak vulnerability in Business Central (CVE-2026‑40375), but administrators remain uncertain about affected versions, attack vectors, and whether a definitive patch exists, with a vague reference to a Patch Tuesday update.

    0000046
    1.3K followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftdynamics_365_business_central_2024---
Appmicrosoftdynamics_365_business_central_2025---
Appmicrosoftdynamics_365_business_central_2026---

Explore more

Back to dashboardmicrosoft CVEsdynamics_365_business_central_2024 vulnerabilities