CVE-2025-11681: M-Files Server

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Denial-of-service condition in M-Files Server versions before 25.11.15392.1, before 25.2 LTS SR2 and before 25.8 LTS SR2 allows an authenticated user to cause the MFserver process to crash.

Affected products

• M-Files M-Files Server: before 25.2.14524.13 (fixed in 25.2.14524.13); before 25.11.15392.1 (fixed in 25.11.15392.1); from 25.8.15085.13, before 25.8.15085.17 (fixed in 25.8.15085.17)

Published 2025-11-17. Last modified 2026-10-07.