CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-47646 — Improper neutralization of input during web page generation ('cross-site scripti...

·Source: NIST NVD

Updated:

Executive Summary

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a network.

Analysis

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a network. CVSS Score: 9.3. Published: 2026-07-09T00:17:23.160.

Indicators of Compromise (1)

CVE (1)
CVE-2026-47646
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 9, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-14894 — The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to...

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 6.3.313 via the submit_form function. This is due to missing file type validation and the absence of any capability check on the submit_form nopriv AJAX handler, whose only barrier is a session nonce freely obtainable by unauthenticated visitors via a separat

CVE-2026-14894
NIST NVD
MEDIUMVulnerability

CaixaBank builds public benches out of recycled bank cards

CaixaBank has embarked on a novel recycling project, turning old bank cards into benches that will sit in villages where the lender's mobile branches visit.

Finextra
MEDIUMVulnerability

European Parliament backs digital euro, paving way for final negotiations

The European Parliament has voted in favour of the creation of a digital euro, paving the way for the final stage of negotiations with EU state members on the makeup of the CBDC ahead of a potential 2029 launch.

Finextra