High severity7.3NVD Advisory· Published Apr 1, 2026· Updated Apr 2, 2026
CVE-2026-0932
CVE-2026-0932
Description
Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated attacker to cause the server to send HTTP GET requests to arbitrary URLs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:m-files:m-files_server:*:*:*:*:*:*:*:*range: <26.3.15818.5
- (no CPE)range: <26.3
Patches
Vulnerability mechanics
References
2- empower.m-files.com/security-advisories/CVE-2026-0932nvdVendor Advisory
- product.m-files.com/security-advisories/cve-2026-0932/nvdVendor Advisory
News mentions
0No linked articles in our index yet.