CYBERSECURITYTRACKER
Permanent story citation

NCSC-2026-0424 Vulnerabilities Fixed in Microsoft Dynamics

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10174

As cited

Copy frozen at (site build).

vulnerabilities

NCSC-2026-0424 Vulnerabilities Fixed in Microsoft Dynamics

Microsoft patched vulnerabilities across Dynamics Dataverse, Business Central, Dynamics 365 on-premises, and Power Apps. The flaws range from CVSS 7.5 to 9.8 and enable remote code execution, privilege escalation, and unauthorized data access.

Why it matters: Organizations running Microsoft Dynamics and Power Apps must apply these patches immediately to prevent attackers from executing arbitrary code or gaining elevated access to business-critical systems.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary