VULNERABILITY INTELLIGENCE

CVE-2026-0663

CVSS score4.9 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2026-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Description

Denial-of-service vulnerability in M-Files Server versions before 26.1.15632.3 allows an authenticated attacker with vault administrator privileges to crash the M-Files Server process by calling a vulnerable API endpoint.

Weakness classification

  • security@m-files.com: CWE-1286

Primary references