{"id":"CVE-2026-100214","published":"2026-10-13T19:17:41.343","lastModified":"2026-10-14T04:18:05.470","description":"Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100214","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A deserialization vulnerability in Dynamics Business Central allows authenticated attackers to execute arbitrary code remotely by crafting malicious serialized data. This represents a critical security flaw since it can be exploited over the network without requiring user interaction.","exploitability":"Exploitation requires an authenticated user account with access to the affected Business Central instance, but is relatively straightforward once achieved as it leverages standard deserialization techniques.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full control over the Business Central server, potentially leading to data exfiltration, privilege escalation, and lateral movement within the organization's network.","remediation":"Apply the latest available security patch or upgrade to Dynamics 365 Business Central version 2024 release wave 2 or later, as this vulnerability was introduced in earlier versions.","detection":"Monitor for unusual deserialization activity in application logs and check for suspicious network connections to Business Central endpoints, particularly those involving serialized data transfers.","tags":["deserialization","remote-code-execution","business-central","network"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:51:36.940Z"}}