CVE-2026-0932
Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated attacker to cause the server to send HTTP GET requests to arbitrary URLs.
Vendor
Product
CWE
Yayın Tarihi
2026-04-01 11:15:58
Güncelleme
2026-04-02 18:18:54
Source Identifier
security@m-files.com
KEV Date Added
-