dataverse vulnerabilities
CVEs whose affected-version data names the dataverse package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-88131Critical· 9.8Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
▾ Midnightmicrosoft · dataverseEPSS 1.2%via NVD
CVE-2026-77903Critical· 9.0Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
▾ Midnightmicrosoft · dataverseEPSS 0.37%via NVD