What’s Vulnerable › Products
M-Files Corporation M-Files Server vulnerabilities
37 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.
Check whether your M-Files Corporation M-Files Server version is affected
Latest M-Files Corporation M-Files Server vulnerabilities
- CVE-2026-0931 — Denial-of-service vulnerability in M-Files Server (CVSS 6.9)
- CVE-2026-0983 — Denial of service vulnerability in M-Files Server (CVSS 7.1)
- CVE-2026-0932 — (CVSS 7.3)
- CVE-2026-0663 — Denial of Service condition in M-Files Server (CVSS 4.9)
- CVE-2025-14267 — Unintended temporary cached data included in a structure only copy intended to be empty of data (CVSS 4.9)
- CVE-2025-13008 — Session Token Disclosure in M-Files Web (CVSS 8.6)
- CVE-2025-14318 — Improper access validation in M-Files Server (CVSS 4.3)
- CVE-2025-11681 — Denial of Service condition in M-Files Server (CVSS 6.5)
- CVE-2025-5964 — Path traversal in M-Files API (CVSS 6.5)
- CVE-2025-3086 — User in anonymous role could create and delete views (CVSS 7.1)
- CVE-2025-0648 — M-Files Server crash via EOT database driver configuration (CVSS 4.9)
- CVE-2025-0635 — Denial of Service condition in M-Files Server (CVSS 7.5)
- CVE-2025-0619 — Unsafe stored password recovery (CVSS 4.9)
- CVE-2024-10127 — Support for authentication bypass condition in M-Files LDAP authentication (CVSS 9.8)
- CVE-2024-10126 — Local file inclusion vulnerability in M-Files Server (CVSS 4.3)
- CVE-2024-6789 — Path traversal in M-Files API (CVSS 6.5)
- CVE-2024-4056 — Denial of service condition in M-Files Server (CVSS 7.5)
- CVE-2024-0563 — Denial of service condition in M-Files Server (CVSS 6.5)
- CVE-2023-6912 — Brute force vulnerability in M-Files user authentication (CVSS 9.8)
- CVE-2023-6910 — Uncontrolled Resource Consumption in M-Files Server (CVSS 6.5)
- CVE-2023-6239 — Incorrect calculation of effective permissions (CVSS 8.8)
- CVE-2023-6189 — Improper Permission Handling in M-Files Server (CVSS 5.3)
- CVE-2023-6117 — M-Files REST API allows Denial of Service (CVSS 7.5)
- CVE-2023-3405 — Denial of service condition in M-Files Server (CVSS 7.5)
- CVE-2023-2112 — Desktop component allows lateral movement between sessions (CVSS 7.8)