CVE-2026-0983CWE-1286

Denial of service vulnerability in M-Files Server

High · published May 18, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

Denial-of-service condition in M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3 allows an authenticated user to cause the MFserver process to crash

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00226 · 12.6th percentile
Weakness
CWE-1286 · Improper Validation of Syntactic Correctness of Input
Published
2026-05-18T11:05Z
EPSS history
Timeline
  • 18 MAY 11:05Z
    Denial of service vulnerability in M-Files Server
    cvelistv5