{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Microsoft Dynamics NAV ist eine Standardsoftware für ERP-Systeme.\r\nMicrosoft Dynamics 365 ist eine All-in-One-Unternehmensmanagementlösung.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Microsoft Dynamics NAV 2017, Microsoft Dynamics NAV 2018 und Microsoft Dynamics 365 Business Central ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3918 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3918.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3918 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3918"
    }, {
      "category" : "external",
      "summary" : "Microsoft Leitfaden für Sicherheitsupdates",
      "url" : "https://msrc.microsoft.com/update-guide/"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-100214",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100214"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-105728",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105728"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-105727",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105727"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-102226",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102226"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-70213",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70213"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-88131",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88131"
    } ],
    "source_lang" : "en-US",
    "title" : "Microsoft Dynamics: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-10-13T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-14T12:09:45.677+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3918",
      "initial_release_date" : "2026-10-13T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-13T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version",
          "name" : "Business Central",
          "product" : {
            "name" : "Microsoft Dynamics 365 Business Central",
            "product_id" : "T061160",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:dynamics_365:business_central"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Dynamics 365"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "Dynamics NAV 2017 on Windows Server 2012",
          "product" : {
            "name" : "Microsoft Dynamics NAV 2017 Dynamics NAV 2017 on Windows Server 2012",
            "product_id" : "T061158",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:dynamics_nav_2017:dynamics_nav_2017_on_windows_server_2012"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Dynamics NAV 2017"
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "Dynamics NAV 2018 on Windows Server 2012",
          "product" : {
            "name" : "Microsoft Dynamics NAV 2018 Dynamics NAV 2018 on Windows Server 2012",
            "product_id" : "T061159",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:dynamics_nav_2018:dynamics_nav_2018_on_windows_server_2012"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Dynamics NAV 2018"
      } ],
      "category" : "vendor",
      "name" : "Microsoft"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-100214",
    "product_status" : {
      "known_affected" : [ "T061160", "T061158", "T061159" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-100214"
  }, {
    "cve" : "CVE-2026-102226",
    "product_status" : {
      "known_affected" : [ "T061160", "T061158", "T061159" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-102226"
  }, {
    "cve" : "CVE-2026-105727",
    "product_status" : {
      "known_affected" : [ "T061160", "T061158", "T061159" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-105727"
  }, {
    "cve" : "CVE-2026-105728",
    "product_status" : {
      "known_affected" : [ "T061160", "T061158", "T061159" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-105728"
  } ]
}