High · 7.1 CVE-2026-0983 EUVD-2026-30767GHSA-x6cg-7p5m-7wcc

Denial of service vulnerability in M-Files Server

Published May 18, 2026 · Updated May 18, 2026 · Assigned by M-Files Corporation

Description

Denial-of-service condition in M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3 allows an authenticated user to cause the MFserver process to crash

Affected products

Vendor	Product	Affected	Fixed
M-Files	M-Files Server	< 26.5.16015.0, LTS 25.8.15085.13 – < LTS 25.8.15085.24, LTS 26.2.15718.8 – < LTS 26.2.15718.10	26.5.16015.0

Advisories 1

WID-SEC-2026-1572 M-Files M-Files Server: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · May 18, 2026

References

https://empower.m-files.com/security-advisories/CVE-2026-0983 vendor-advisory