CVE-2026-0663

Publication date

2026-01-21 10:29:57

Family

M-Files Corporation

State

PUBLISHED

Description

Denial-of-service vulnerability in M-Files Server versions before 26.1.15632.3 allows an authenticated attacker with vault administrator privileges to crash the M-Files Server process by calling a vulnerable API endpoint.