VULNERABILITY INTELLIGENCE
CVE-2026-18372
EPSS probability0.43%
CISA KEVNot currently listed
Published2026-08-19
Last modified2026-10-22
Description
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users.
Weakness classification
- security@m-files.com: CWE-79