CVE Catalog
CVE-2026-66301
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.68%
49th percentile - higher than 49% of all known CVEs
Summary
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.
Risk Assessment
An authorized user could access sensitive data, potentially compromising the confidentiality of organizational information.
Recommendation
Apply appropriate security patches and restrict access to Dynamics 365.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.