NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability3 · 1 read

CVE-2026-42898

CVSS 3.1: 9.9 critical
EPSS: 1%p66
Published: May 12, 2026 · May 12, 2026
Modified: Oct 26, 2026

Analyze CVE-2026-42898 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

Vendors: microsoft

Products: dynamics 365

Weakness: CWE-94

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

6 stories

Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026VulnerabilityExploitedCVE-2025-54518 CVE-2026-41096 CVE-2026-42826+142

60

Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarming

Security AffairsMay 13, 19:28 UTC · May 13, 2026VulnerabilityExploitedCVE-2026-42898 CVE-2026-41089 CVE-2026-41096+42 · 1 read

60

Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilities

Cisco TalosMay 13, 15:34 UTC · May 13, 2026VulnerabilityExploitedCVE-2026-32161 CVE-2026-33109 CVE-2026-33844+223 · 1 read

60

Microsoft on pace to break annual vulnerability record as AI

The RecordMay 13, 12:59 UTC · May 13, 2026VulnerabilityExploitedCVE-2026-41089 CVE-2026-41096 CVE-2026-428983 · 1 read

60

Microsoft Fixes 17 Critical Flaws in May Patch Tuesday

Infosecurity MagazineMay 13, 08:15 UTC · May 13, 2026VulnerabilityCVE-2026-41089 CVE-2026-41096 CVE-2026-428982

60

Microsoft addresses 137 vulnerabilities in May’s Patch Tuesday, including 13 rated critical

CyberScoopMay 12, 21:00 UTC · May 12, 2026VulnerabilityExploitedCVE-2026-33109 CVE-2026-42823 CVE-2026-42898+23 · 1 read

60