M-files M-Files Web vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting M-files M-Files Web: 2 record(s), with affected versions and fixes.
CVE-2026-18372
Medium · 4.8
CWE-79 Aug 19, 2026
CSS injection in M-Files Web
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users.
CVE-2026-18371
Medium · 5.1
CWE-79 Aug 19, 2026
HTML injection in M-Files Web
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users.