MC
Vendor
M-Files Corporation
11
CVEs
0
On KEV
0
New 30D
Products
MS8.6
M-Files Server
M-Files Corporation
8 CVEs0 on KEV0 new
MW5.1
M-Files Web
M-Files Corporation
2 CVEs0 on KEV0 new
HU5.4
Hubshare
M-Files Corporation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-18372 | MW M-Files Web M-Files Corporation | 4.8 | Aug 19 | CSS injection in M-Files Web |
| CVE-2026-18371 | MW M-Files Web M-Files Corporation | 5.1 | Aug 19 | HTML injection in M-Files Web |
| CVE-2026-0931 | MS M-Files Server M-Files Corporation | 6.9 | Aug 5 | Denial-of-service vulnerability in M-Files Server |
| CVE-2026-0983 | MS M-Files Server M-Files Corporation | 7.1 | May 18 | Denial of service vulnerability in M-Files Server |
| CVE-2026-0932 | MS M-Files Server M-Files Corporation | 7.3 | Apr 1 | Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated… |
| CVE-2026-0663 | MS M-Files Server M-Files Corporation | 4.9 | Jan 21 | Denial of Service condition in M-Files Server |
| CVE-2025-13008 | MS M-Files Server M-Files Corporation | 8.6 | Dec 19 | Session Token Disclosure in M-Files Web |
| CVE-2025-14267 | MS M-Files Server M-Files Corporation | 4.9 | Dec 19 | Unintended temporary cached data included in a structure only copy intended to be empty of data |
| CVE-2025-14318 | MS M-Files Server M-Files Corporation | 4.3 | Dec 18 | Improper access validation in M-Files Server |
| CVE-2025-11681 | MS M-Files Server M-Files Corporation | 6.5 | Nov 17 | Denial of Service condition in M-Files Server |
| CVE-2025-9826 | HU Hubshare M-Files Corporation | 5.4 | Sep 15 | Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users |