M-files Corporation vulnerabilities
64 CVEs and advisories name M-files Corporation as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-18372CSS injection in M-Files Web
- CVE-2026-18371HTML injection in M-Files Web
- CVE-2026-0931Denial-of-service vulnerability in M-Files Server
- CVE-2026-0983Denial of service vulnerability in M-Files Server
- CVE-2026-0932Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server befo
- CVE-2026-0663Denial of Service condition in M-Files Server
- CVE-2025-13008Session Token Disclosure in M-Files Web
- CVE-2025-14267Unintended temporary cached data included in a structure only copy intended to be empty of data
- CVE-2025-14318Improper access validation in M-Files Server
- CVE-2025-11681Denial of Service condition in M-Files Server
- CVE-2025-9826Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution f
- CVE-2025-2091Open redirection in M-Files Mobile
- CVE-2025-5964Path traversal in M-Files API
- CVE-2025-3087Stored XSS Vulnerability in M-Files Web
- CVE-2025-3086User in anonymous role could create and delete views
- CVE-2025-2159Stored XSS in M-Files Admin user interface
- CVE-2025-0635Denial of Service condition in M-Files Server
- CVE-2025-0619Unsafe stored password recovery
- CVE-2025-0648M-Files Server crash via EOT database driver configuration
- CVE-2024-10126Local file inclusion vulnerability in M-Files Server
- CVE-2024-10127Support for authentication bypass condition in M-Files LDAP authentication
- CVE-2024-11176Incorrect evaluation of effective permissions in M-Files Aino
- CVE-2024-9333Permission bypass in M-Files Connector for Copilot
- CVE-2024-9174Stored HTML Injection in Hubshare social module
- CVE-2024-6789Path traversal in M-Files API
- CVE-2024-6124Reflected XSS in Hubshare via Open Redirect
- CVE-2024-6881Stored XSS Vulnerability
- CVE-2024-5142XSS in Hubshare's social module
- CVE-2024-4056Denial of service condition in M-Files Server
- CVE-2023-4479Stored XSS Vulnerability in M-Files Web