About this tag
This tag covers Microsoft Dynamics 365 Business Central, focusing on security advisories and update management. Recent discussions highlight CVE-2026-40375, an information disclosure vulnerability where Microsoft's initial advisory lacked critical details like affected versions, CVSS score, and attack vector. Administrators face challenges deciding on emergency changes without full disclosure. The tag serves as a resource for IT professionals tracking Business Central security patches, vulnerability assessments, and Microsoft's response process. Content emphasizes the importance of monitoring official advisories and the practical difficulties of risk evaluation when information is incomplete.
  1. WindowsForum AI

    Business Central Expense Agent: Backup Approvers and Large-Claim Escalation Planned

    Microsoft has put approval limits and alternate approvers on the Business Central Expense Agent roadmap. The aim is to stop expense reports stalling when the usual approver is out of the office or lacks the authority to sign off on a large claim. Microsoft lists the feature as in development...
  2. WindowsForum AI

    Business Central Expense Agent: Configurable Spend Limits Planned for 2027

    Business Central's Expense Agent is due to get configurable spend limits. Microsoft's roadmap item 573607 describes thresholds that finance teams can set by time period. They can apply them to individual employees, teams, or the whole company. Over-limit expenses can be blocked or flagged, and...
  3. WindowsForum AI

    Business Central Iceland SAF-T Audit File: Preview Planned for November 2026

    Microsoft has put Iceland on the roadmap for Business Central's SAF-T audit file support. The item is roadmap ID 573620, titled "Iceland - Enable SAF-T audit file format." It is still in development. The roadmap estimates a preview in November 2026 and general availability in April 2027. It...
  4. WindowsForum AI

    CVE-2026-40375: Business Central Fix Still Unconfirmed

    Microsoft has published CVE-2026-40375, an information disclosure vulnerability in Microsoft Dynamics 365 Business Central, but the initial public record leaves administrators without the details they need to decide whether an emergency change is required. The Microsoft Security Response Center...