CYBERHAWK / CVE / CVE-2026-40371
CVE-2026-40371
HIGH
CVSS 8.8
other
The flaw
Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.
What to do
Review advisory and patch per vendor guidance.
References
In the news
- Microsoft Haziran 2026 Patch Tuesday: 3 Zero-Day, 200 Zafiyetcozumpark.com · 2026-06-09
- Zero Day Initiative — The June 2026 Security Update Reviewthezdi.com · 2026-06-09
- Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flawsBleepingComputer · 2026-06-09