CVE-2026-55944
A security flaw in Microsoft Dynamics NAV allows an attacker to run malicious code on a system by sending specially crafted data. This occurs because the software incorrectly processes untrusted information during a process called deserialization.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Users running Microsoft Dynamics NAV 2018.
Real-world impact
An attacker could remotely take control of the affected server and execute arbitrary commands without needing any login credentials or user interaction.
Why this severity
This is a critical vulnerability because it can be exploited remotely over a network without any authentication or user interaction, potentially leading to a total compromise of the system.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources
Timeline
- Jul 14, 2026 · 20d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 22, 2026 · 12d agoAdvisory updatedThe NVD record was last revised.
How it’s attacked
References & advisories
- msrc.microsoft.com/update-guide/vulnerability/…vendor advisorypatch