Vulnerability Details CVE-2026-0663
Denial-of-service vulnerability in M-Files Server versions before 26.1.15632.3 allows an authenticated attacker with vault administrator privileges to crash the M-Files Server process by calling a vulnerable API endpoint.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.0%
CVSS Severity
CVSS v3 Score 4.9
Products affected by CVE-2026-0663
-
cpe:2.3:a:m-files:m-files_server:-
-
cpe:2.3:a:m-files:m-files_server:22.11.12011.0
-
cpe:2.3:a:m-files:m-files_server:22.12.12140.3
-
cpe:2.3:a:m-files:m-files_server:22.2.11051.0
-
cpe:2.3:a:m-files:m-files_server:22.3.11237.3
-
cpe:2.3:a:m-files:m-files_server:22.6.11534.4
-
cpe:2.3:a:m-files:m-files_server:23.12.13195.0
-
cpe:2.3:a:m-files:m-files_server:23.12.13205.0
-
cpe:2.3:a:m-files:m-files_server:23.4.12455.0
-
cpe:2.3:a:m-files:m-files_server:23.4.12528.1
-
cpe:2.3:a:m-files:m-files_server:23.6.12695.3
-
cpe:2.3:a:m-files:m-files_server:23.9