CVE-2026-0932mediumCWE-918

CVE-2026-0932: falha de média gravidade em M-Files Server

Publicada em

Seguir esta CVE+ Monitorar M-Files Server

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.2%
Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated attacker to cause the server to send HTTP GET requests to arbitrary URLs.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
M-Files Corporation · M-Files Server
CVEs relacionadas — M-Files Server

No mesmo produto, das mais perigosas para as menos.

CVE-2025-5964HIGHPath traversal in M-Files APIEPSS 13.0%CVE-2023-6912HIGHBrute force vulnerability in M-Files user authenticationEPSS 1.0%CVE-2023-6910MEDIUMUncontrolled Resource Consumption in M-Files ServerEPSS 0.9%CVE-2024-4056HIGHDenial of service condition in M-Files ServerEPSS 0.8%CVE-2021-41810MEDIUMScript injection in M-Files AdminEPSS 0.7%CVE-2024-0563MEDIUMDenial of service condition in M-Files ServerEPSS 0.7%