Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

M-Files Corporation — Vulnerabilities & Security Advisories 33

Browse all 33 CVE security advisories affecting M-Files Corporation. AI-powered Chinese analysis, POCs, and references for each vulnerability.

M-Files Corporation provides intelligent information management software that organizes data based on context rather than physical location, serving enterprises seeking unified document control. The platform’s architecture, which integrates with various enterprise systems, has historically exposed it to a range of security flaws, currently totaling 29 recorded Common Vulnerabilities and Exposures. These vulnerabilities predominantly involve remote code execution, cross-site scripting, and privilege escalation, often stemming from insufficient input validation or improper access controls within its web interface and API endpoints. While no catastrophic data breaches have been widely publicized, the accumulation of these CVEs highlights persistent challenges in securing complex enterprise integrations. M-Files Corporation has responded to these findings through regular patch cycles, yet the high volume of disclosed issues suggests ongoing risks for organizations relying on its unpatched or misconfigured deployments.

CVE ID Title CVSS Severity Published
CVE-2026-18372 CSS injection in M-Files Web — M-Files Web CWE-79 4.8 Medium 2026-08-19
CVE-2026-18371 HTML injection in M-Files Web — M-Files Web CWE-79 5.1 Medium 2026-08-19
CVE-2026-0931 Denial-of-service vulnerability in M-Files Server — M-Files Server CWE-1286 6.9 Medium 2026-08-05
CVE-2026-0983 Denial of service vulnerability in M-Files Server — M-Files Server CWE-1286 - - 2026-05-18
CVE-2026-0932 M-Files Server 安全漏洞 — M-Files Server CWE-918 8.2AI High AI 2026-04-01
CVE-2026-0663 Denial of Service condition in M-Files Server — M-Files Server CWE-1286 4.9AI Medium AI 2026-01-21
CVE-2025-13008 Session Token Disclosure in M-Files Web — M-Files Server CWE-359 6.5AI Medium AI 2025-12-19
CVE-2025-14267 Unintended temporary cached data included in a structure only copy intended to be empty of data — M-Files Server CWE-212 6.5AI Medium AI 2025-12-19
CVE-2025-14318 Improper access validation in M-Files Server — M-Files Server CWE-863 6.5AI Medium AI 2025-12-18
CVE-2025-11681 Denial of Service condition in M-Files Server — M-Files Server CWE-400 6.5AI Medium AI 2025-11-17
CVE-2025-9826 M-Files Hubshare 安全漏洞 — Hubshare CWE-79 5.4AI Medium AI 2025-09-15
CVE-2025-2091 Open redirection in M-Files Mobile — M-Files Mobile CWE-601 5.0AI Medium AI 2025-06-16
CVE-2025-5964 Path traversal in M-Files API — M-Files Server CWE-22 6.5AI Medium AI 2025-06-15
CVE-2025-3087 Stored XSS Vulnerability in M-Files Web — M-Files Web CWE-79 5.4AI Medium AI 2025-04-04
CVE-2025-3086 User in anonymous role could create and delete views — M-Files Server CWE-653 7.1AI High AI 2025-04-04
CVE-2025-2159 Stored XSS in M-Files Admin user interface — M-Files Admin CWE-79 4.6AI Medium AI 2025-04-04
CVE-2025-0635 Denial of Service condition in M-Files Server — M-Files Server CWE-770 7.5 - 2025-01-23
CVE-2025-0619 Unsafe stored password recovery — M-Files Server CWE-522 4.9 - 2025-01-23
CVE-2025-0648 M-Files Server crash via EOT database driver configuration — M-Files Server CWE-248 4.9 - 2025-01-23
CVE-2024-10127 Support for authentication bypass condition in M-Files LDAP authentication — M-Files Server CWE-303 8.1AI High AI 2024-11-20
CVE-2024-11176 Incorrect evaluation of effective permissions in M-Files Aino — M-Files Aino CWE-863 6.5AI Medium AI 2024-11-20
CVE-2024-9333 Permission bypass in M-Files Connector for Copilot — M-Files Connector for Copilot CWE-281 4.3 - 2024-10-02
CVE-2024-9174 Stored HTML Injection in Hubshare social module — M-Files Hubshare CWE-79 4.1 - 2024-10-02
CVE-2024-6789 Path traversal in M-Files API — M-Files Server CWE-22 6.5AI Medium AI 2024-08-27
CVE-2024-6124 Reflected XSS in Hubshare via Open Redirect — Hubshare CWE-79 6.1AI Medium AI 2024-07-29
CVE-2024-6881 Stored XSS Vulnerability — Hubshare CWE-79 5.4AI Medium AI 2024-07-29
CVE-2024-5142 XSS in Hubshare's social module — Hubshare CWE-79 5.4 - 2024-05-24
CVE-2024-4056 Denial of service condition in M-Files Server — M-Files Server CWE-1333 7.5 High 2024-04-26
CVE-2023-4479 Stored XSS Vulnerability in M-Files Web — M-Files Web CWE-79 7.3 High 2024-03-04
CVE-2024-0563 Denial of service condition in M-Files Server — M-Files Server CWE-770 4.3 Medium 2024-02-23

This page lists every published CVE security advisory associated with M-Files Corporation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.