PT-2026-41667 · M Files · M-Files Server

Published 2026-05-18 · Updated 2026-05-18 · CVE-2026-0983

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions M-Files Server versions prior to 26.5.16015.0 M-Files Server versions prior to 26.2 LTS M-Files Server versions prior to 25.8 LTS SR3

Description A denial-of-service condition exists that allows an authenticated user to cause the MFserver process to crash.

Recommendations Update to version 26.5.16015.0 or later. Update to version 26.2 LTS or later. Update to version 25.8 LTS SR3 or later.

Fix

DoS

Weakness Enumeration

CWE-1286

Related Identifiers

CVE-2026-0983

Affected Products

M-Files Server

References · 5

• https://empower.m-files.com/security-advisories/CVE-2026-0983 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0983 · Security Note
• https://t.me/CVEtracker/54127 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2056356152510693511 · Twitter Post
• https://twitter.com/CVEarity/status/2056408318609076390 · Twitter Post