MS
Product
M-Files Server
8
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 5Low 0
Watch
Add M-Files Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-13008 | 8.6 | Dec 19 | Session Token Disclosure in M-Files Web Affected: before 25.12.15491.7 |
| CVE-2026-0932 | 7.3 | Apr 1 | Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated… Affected: before 26.3.15818.5 |
| CVE-2026-0983 | 7.1 | May 18 | Denial of service vulnerability in M-Files Server Affected: before 26.5.16015.0; LTS 25.8.15085.13 before LTS 25.8.15085.24; LTS 26.2.15718.8 before LTS 26.2.15718.10 |
| CVE-2026-0931 | 6.9 | Aug 5 | Denial-of-service vulnerability in M-Files Server Affected: before 26.5.16015.3 |
| CVE-2025-11681 | 6.5 | Nov 17 | Denial of Service condition in M-Files Server Affected: before 25.11.15392.1 |
| CVE-2026-0663 | 4.9 | Jan 21 | Denial of Service condition in M-Files Server Affected: before 26.1.15632.3 |
| CVE-2025-14267 | 4.9 | Dec 19 | Unintended temporary cached data included in a structure only copy intended to be empty of data Affected: before 25.12.15491.7 |
| CVE-2025-14318 | 4.3 | Dec 18 | Improper access validation in M-Files Server Affected: before 25.12.15491.7 |
Showing 8
