Stored Cross-Site Scripting Vulnerability in M-Files Hubshare
CVE-2025-9826

7HIGH

Key Information:

Vendor

M-files Corporation

Status
Hubshare
Vendor
CVE Published:
15 September 2025

What is CVE-2025-9826?

A stored cross-site scripting vulnerability exists in M-Files Hubshare prior to version 25.8. This security flaw permits authenticated attackers to execute arbitrary scripts on behalf of other users. As a result, an attacker can manipulate data or perform unwanted actions within a user's session. Organizations using older versions of M-Files Hubshare are at increased risk and should consider upgrading to mitigate potential exposure.

Affected Version(s)

Hubshare 0 < 25.8

References

https://product.m-files.com/security-advisories/cve-2024-...

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-9826 : Stored Cross-Site Scripting Vulnerability in M-Files Hubshare