CVE-2026-0931CWE-1286

CVE-2026-0931

published August 5, 2026

CVSS

6.9

EPSS

Percentile

15.2

In the wild

Unconfirmed

What it is

Denial-of-service vulnerability in M-Files Server versions before 26.5.16015.3 allows an authenticated admin user to cause the M-Files Server process to crash and fail to restart.

The record

Technical detail

CVSS: 6.9 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00242 · 15.2th percentile
Weakness: CWE-1286 · Improper Validation of Syntactic Correctness of Input
Published: 2026-08-05T14:17Z

References (1)

https://empower.m-files.com/security-advisories/CVE-2026-0931 · [email protected]

EPSS history

Timeline

05 AUG 09:42Z
Denial-of-service vulnerability in M-Files Server
cvelistv5