CVE-2026-100214: Microsoft Dynamics Nav 2017

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.

Affected products

• Microsoft Microsoft Dynamics Nav 2017: from 1.0, before 30713 (fixed in 30713)
• Microsoft Microsoft Dynamics Nav 2018: from 1.0, before 11.0.50736.0 (fixed in 11.0.50736.0)

Published 2026-10-13. Last modified 2026-10-14.