CVE-2026-0983: M-Files Corporation M-Files Server

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Denial-of-service condition in M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3 allows an authenticated user to cause the MFserver process to crash

Affected products

• M-Files Corporation M-Files Server: before 26.5.16015.0 (fixed in 26.5.16015.0)

Published 2026-05-18. Last modified 2026-06-17.