{"id":"CVE-2026-88131","published":"2026-10-08T23:17:04.590","lastModified":"2026-10-10T04:18:19.240","description":"Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88131","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw involves deserialization of untrusted data in Microsoft Dataverse, allowing an attacker to execute code over a network, leading to remote code execution.","exploitability":"Exploitation is relatively straightforward given network access, and requires an attacker to manipulate untrusted data.","blast_radius":"If exploited, the impact could be severe, potentially leading to complete control of affected systems and data loss.","remediation":"Upgrade to the latest version of Microsoft Dataverse as soon as possible.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","network"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:43:20.838Z"}}