Advisories · Technology

M-Files Corporation M-Files Server.

Every CVE that names M-Files Corporation M-Files Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-0931 CVE record

CVSS 6.9 Medium

Denial-of-service vulnerability in M-Files Server
- M-Files Corporation M-Files Server
- CWE-1286
Not analysed yet 5 Aug 2026
CVE-2026-0983 CVE record

CVSS 7.1 High

Denial of service vulnerability in M-Files Server
- M-Files Corporation M-Files Server
- CWE-1286
Not analysed yet 18 May 2026
CVE-2026-0932 CVE record

CVSS 6.9 Medium

Server-side request forgery in M-Files Corporation M-Files Server
- M-Files Corporation M-Files Server
- Server-side request forgery (SSRF)
Not analysed yet 1 Apr 2026
CVE-2026-0663 CVE record

CVSS 6.9 Medium

Denial of Service condition in M-Files Server
- M-Files Corporation M-Files Server
- CWE-1286
Not analysed yet 21 Jan 2026
CVE-2025-13008 CVE record

CVSS 8.6 High

Session Token Disclosure in M-Files Web
- M-Files Corporation M-Files Server
- Information disclosure
Not analysed yet 19 Dec 2025
CVE-2025-14267 CVE record

CVSS 5.6 Medium

Unintended temporary cached data included in a structure only copy intended to be empty of data
- M-Files Corporation M-Files Server
- CWE-212
Not analysed yet 19 Dec 2025
CVE-2025-14318 CVE record

CVSS 5.3 Medium

Improper access validation in M-Files Server
- M-Files Corporation M-Files Server
- Broken access control
Not analysed yet 18 Dec 2025
CVE-2025-11681 CVE record

CVSS 7.1 High

Denial of Service condition in M-Files Server
- M-Files Corporation M-Files Server
- Denial of service
Not analysed yet 17 Nov 2025
CVE-2025-5964 CVE record

CVSS 8.4 HighCritical · CVSS 7+ and EPSS

Path traversal in M-Files API
- M-Files Corporation M-Files Server
- Path traversal
Not analysed yet 15 Jun 2025
CVE-2025-3086 CVE record

CVSS 6.3 Medium

User in anonymous role could create and delete views
- M-Files Corporation M-Files Server
- CWE-653
Not analysed yet 4 Apr 2025
CVE-2025-0635 CVE record

CVSS 6.3 Medium

Denial of Service condition in M-Files Server
- M-Files Corporation M-Files Server
- Denial of service
Not analysed yet 23 Jan 2025
CVE-2025-0619 CVE record

CVSS 4.6 Medium

Unsafe stored password recovery
- M-Files Corporation M-Files Server
- Hard-coded credentials
Not analysed yet 23 Jan 2025
CVE-2025-0648 CVE record

CVSS 5.9 Medium

M-Files Server crash via EOT database driver configuration
- M-Files Corporation M-Files Server
- CWE-248
Not analysed yet 23 Jan 2025
CVE-2024-10126 CVE record

CVSS 5.3 Medium

Local file inclusion vulnerability in M-Files Server
- M-Files Corporation" M-Files Server
- Information disclosure
Not analysed yet 20 Nov 2024
CVE-2024-10127 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Support for authentication bypass condition in M-Files LDAP authentication
- M-Files Corporation M-Files Server
- Authentication bypass
Not analysed yet 20 Nov 2024
CVE-2024-6789 CVE record

CVSS 8.4 High

Path traversal in M-Files API
- M-Files Corporation M-Files Server
- Path traversal
Not analysed yet 27 Aug 2024
CVE-2024-4056 CVE record

CVSS 7.5 High

Denial of service condition in M-Files Server
- M-Files Corporation M-Files Server
- Denial of service
Not analysed yet 26 Apr 2024
CVE-2024-0563 CVE record

CVSS 4.3 Medium

Denial of service condition in M-Files Server
- M-Files Corporation M-Files Server
- Denial of service
Not analysed yet 23 Feb 2024
CVE-2023-6910 CVE record

CVSS 6.5 Medium

Uncontrolled Resource Consumption in M-Files Server
- M-Files Corporation M-Files Server
- Denial of service
Not analysed yet 20 Dec 2023
CVE-2023-6912 CVE record

CVSS 7.5 High

Brute force vulnerability in M-Files user authentication
- M-Files Corporation M-Files Server
- Authentication bypass
Not analysed yet 20 Dec 2023
CVE-2021-41810 CVE record

CVSS 5.2 Medium

Script injection in M-Files Admin
- M-Files Corporation M-Files Server
- Cross-site scripting (XSS)
Not analysed yet 2 May 2022