CVE-2026-0932
Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated atta…
Published: 2026-04-01 · CVSS: 6.9 · CVSS 4.0
Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated attacker to cause the server to send HTTP GET requests to arbitrary URLs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7