Known Vulnerabilities for M-Files Server by M-Files Corporation
Listed below are 10 of the newest known vulnerabilities associated with "M-Files Server" by "M-Files Corporation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49238 json | An issue was discovered in Canonical Multipass before version 1.16.3. The host-side SFTP server component (sshfs_server), whi... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-48116 json | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. P... | Not Provided | 2026-05-28 | 2026-05-30 |
| CVE-2026-45731 json | WWBN AVideo is an open source video platform. In 29.0 and earlier, view/update.php reads $_POST['updateFile'] as a relative p... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-45661 json | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerability... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-45230 json | DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete arr... | Not Provided | 2026-05-18 | 2026-05-18 |
| CVE-2026-45088 json | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is run in REST A... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-45053 json | CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Arbitrary File Upload vulnerability exists in th... | Not Provided | 2026-05-13 | 2026-05-15 |
| CVE-2026-44885 json | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to man... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-44647 json | OneDev is a Git server with CI/CD, kanban, and packages. Prior to 15.0.2, there is behavior that breaks the expected boundary... | Not Provided | 2026-05-14 | 2026-05-14 |
| CVE-2026-44594 json | esm.sh is a no-build content delivery network (CDN) for web development. In 137 and earlier, a Local File Inclusion (LFI) vul... | Not Provided | 2026-05-28 | 2026-05-28 |