CVE-2026-47646

Dynamics 365 Customer Voice is vulnerable to a critical cross-site scripting (XSS) flaw that allows unauthorized attackers to inject malicious scripts, potentially leading to user impersonation and data theft. Organizations utilizing this platform should prioritize immediate remediation efforts to mitigate the risk of exploitation and protect sensitive user information. Given the high severity rating, all users of Dynamics 365 Customer Voice must assess their exposure and apply necessary security updates promptly.