Read the docs
Microsoft update

KB5123731

Security Update

View on Microsoft →

Fixed in

Fixes 1 record

Priority MEDIUM 42

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00987 Published 2026-09-08 Fixed in 9.1.0048.0004 CWE-94