CVE Catalog
CVE-2026-88131
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.82%
57th percentile - higher than 57% of all known CVEs
Summary
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute arbitrary code in the application context, potentially leading to full system compromise and data exfiltration.
Recommendation
Immediately apply available security updates for Microsoft Dataverse and restrict network access to the minimum required.
Other vulnerabilities in Microsoft Dataverse
See allOriginal NVD description (English source)
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS