CVE-2025-9826: M-Files Hubshare

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution for other users.

Affected products

• M-Files Hubshare: before 25.8 (fixed in 25.8)

Published 2025-09-15. Last modified 2026-06-17.