Monthly vulnerability scanning: first month free! Learn more →

Hero

WE ARE |

WE ARE

HACKIFY

Search

Filter by type

Filter by topic

cloud

(1)

microsoft

(1)

ssrf

(1)

Blog

Microsoft Dynamics 365 SSRF exploit (CVE-2026-32210)

12 June 2026 · 5 min read

Hackify discovered a critical Server-Side Request Forgery (SSRF) in Microsoft Dynamics 365 (online), registered as CVE-2026-32210. Through the Dataverse endpoint msdyn_UCIClientAuth, the bearer token of a logged-in user could be stolen and reused to read, modify and delete Power Apps. This article …