business central security

Microsoft published CVE-2026-40417 on May 12, 2026, describing an Important-severity elevation-of-privilege vulnerability in Microsoft Dynamics 365 Business Central that can let an authorized local attacker gain SYSTEM privileges through weak authentication. The most important word in...