What’s Vulnerable › Products

M-Files Corporation M-Files Web vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your M-Files Corporation M-Files Web version is affected

Latest M-Files Corporation M-Files Web vulnerabilities

• CVE-2026-18372 — CSS injection in M-Files Web (CVSS 4.8)
• CVE-2026-18371 — HTML injection in M-Files Web (CVSS 5.1)
• CVE-2025-3087 — Stored XSS Vulnerability in M-Files Web (CVSS 5.4)
• CVE-2021-41807 — Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts. (CVSS 9.8)
• CVE-2021-37253 — (CVSS 7.5)
• CVE-2021-37254 — (CVSS 7.5)