CVE-2026-88131: Microsoft Dataverse

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.

Affected products

• Microsoft Microsoft Dataverse: affected versions not specified

Published 2026-10-08. Last modified 2026-10-10.