D3
Product
d365fo-mcp-server
by dynamics365ninja · last CVE Oct 21, 2026
1
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add d365fo-mcp-server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114123
New
7.5
0%
Oct 21
D365 F&O MCP Server: Official Azure one-click deployment ships with authentication disabled by default, exposing proprietary X++ source over the public internet
Affected: < 1.11.0
Showing 1