PT-2026-78325 · M Files · M-Files Web

CVE-2026-18371

·

Published

2026-08-19

·

Updated

2026-08-20

CVSS v4.0

5.1

Medium

VectorAV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
Name of the Vulnerable Software and Affected Versions M-Files Web versions prior to 26.8.16330.2
Description An authenticated attacker can perform HTML injection to modify the web user interface contents displayed to other users.
Recommendations Update to version 26.8.16330.2.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-18371

Affected Products

M-Files Web