Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-18371

HTML injection in M-Files Web

HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
M-files Corporation
Products
M-files Web
CVE-2026-18372

CSS injection in M-Files Web

CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
M-files Corporation
Products
M-files Web