Log in Start free

M-Files Corporation

Products

ProductCVEsExploitedLatest
M-Files Server21–Aug 5, 2026
Hubshare4–Sep 15, 2025
M-Files Web4–Aug 19, 2026
M-Files Connector for Copilot1–Oct 2, 2024
M-Files Hubshare1–Oct 2, 2024
M-Files Mobile1–Jun 16, 2025
M-Files Admin1–Apr 4, 2025
M-Files Aino1–Nov 20, 2024

Exploited and recent CVEs

  • CVE-2026-18372 Medium 4.8 CSS injection in M-Files Web 0.4%
  • CVE-2026-18371 Medium 5.1 HTML injection in M-Files Web 0.4%
  • CVE-2026-0931 Medium 6.9 Denial-of-service vulnerability in M-Files Server 0.4%
  • CVE-2026-0983 High 7.1 Denial of service vulnerability in M-Files Server 0.2%
  • CVE-2026-0932 Medium 6.9 Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated attacker to cause the serve 0.2%
  • CVE-2026-0663 Medium 6.9 Denial of Service condition in M-Files Server 0.4%
  • CVE-2025-13008 High 8.6 Session Token Disclosure in M-Files Web 0.5%
  • CVE-2025-14267 Medium 5.6 Unintended temporary cached data included in a structure only copy intended to be empty of data 0.4%
  • CVE-2025-14318 Medium 5.3 Improper access validation in M-Files Server 0.3%
  • CVE-2025-11681 High 7.1 Denial of Service condition in M-Files Server 0.4%
  • CVE-2025-9826 High 7.0 Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users. 0.3%
  • CVE-2025-2091 Medium 4.8 Open redirection in M-Files Mobile 0.3%
  • CVE-2025-5964 High 8.4 Path traversal in M-Files API 13.0%
  • CVE-2025-3087 Medium 5.1 Stored XSS Vulnerability in M-Files Web 0.3%
  • CVE-2025-3086 Medium 6.3 User in anonymous role could create and delete views 0.4%
  • CVE-2025-2159 Medium 5.1 Stored XSS in M-Files Admin user interface 0.2%
  • CVE-2025-0635 Medium 6.3 Denial of Service condition in M-Files Server 0.6%
  • CVE-2025-0619 Medium 4.6 Unsafe stored password recovery 0.4%
  • CVE-2025-0648 Medium 5.9 M-Files Server crash via EOT database driver configuration 0.5%
  • CVE-2024-10126 Medium 5.3 Local file inclusion vulnerability in M-Files Server 0.4%
  • CVE-2024-10127 Critical 9.2 Support for authentication bypass condition in M-Files LDAP authentication 0.6%
  • CVE-2024-11176 Medium 5.3 Incorrect evaluation of effective permissions in M-Files Aino 0.4%
  • CVE-2024-9333 Medium 5.3 Permission bypass in M-Files Connector for Copilot 0.4%
  • CVE-2024-9174 Medium 6.9 Stored HTML Injection in Hubshare social module 0.3%
  • CVE-2024-6789 High 8.4 Path traversal in M-Files API 0.6%
  • CVE-2024-6124 High 8.5 Reflected XSS in Hubshare via Open Redirect 0.3%
  • CVE-2024-6881 High 8.5 Stored XSS Vulnerability 0.3%
  • CVE-2024-5142 High 7.0 XSS in Hubshare's social module 0.3%
  • CVE-2024-4056 High 7.5 Denial of service condition in M-Files Server 0.8%
  • CVE-2023-4479 High 7.3 Stored XSS Vulnerability in M-Files Web 0.4%