NuytsTech Security

CVE-2026-0932

by ·

Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated attacker to cause the server to send HTTP GET requests to arbitrary URLs.

More information : https://empower.m-files.com/security-advisories/CVE-2026-0932

Tags: