Description
Denial-of-service vulnerability in M-Files Server versions before 26.1.15632.3 allows an authenticated attacker with vault administrator privileges to crash the M-Files Server process by calling a vulnerable API endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| M-Files | M-Files Server | < 26.1.15632.3 | 26.1.15632.3 |
Advisories 1
- WID-SEC-2026-0185 M-Files M-Files Server: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jan 21, 2026
References
- https://product.m-files.com/security-advisories/cve-2026-0663/ vendor-advisory
- https://empower.m-files.com/security-advisories/CVE-2026-0663 vendor-advisory