CVE-2026-0932

脆弱性の種類

Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenticated attacker to cause the server to send HTTP GET requests to arbitrary URLs.

影響を受ける製品

• m-files m-files_server

参考情報

• https://empower.m-files.com/security-advisories/CVE-2026-0932
• https://product.m-files.com/security-advisories/cve-2026-0932/