Denial-of-Service Vulnerability in M-Files Server by M-Files
CVE-2026-0931

6.9MEDIUM

Key Information:

Vendor

M-files Corporation

Status
M-files Server
Vendor
CVE Published:
5 August 2026

What is CVE-2026-0931?

The M-Files Server versions prior to 26.5.16015.3 are subject to a Denial-of-Service vulnerability. This flaw allows an authenticated admin user to intentionally crash the M-Files Server process. Once the process fails, it cannot restart automatically, leading to potential downtime and disruption of services within the environment.

Affected Version(s)

M-Files Server 0 < 26.5.16015.3

References

https://empower.m-files.com/security-advisories/CVE-2026-...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.