M-Files Server Information Disclosure Vulnerability Advisory

CERT-Bund published a security advisory identifying an information disclosure vulnerability in M-Files Server, an enterprise information management platform. The flaw (affecting versions below 26.3.15818.5) allows remote anonymous attackers to exploit the system and expose information. The CVSS Base Score is 6.5 (medium) with a Temporal Score of 5.7. Mitigation measures are available.

Organizations running affected M-Files Server installations on Windows should immediately apply the available patch (version 26.3.15818.5 or later) to remediate the vulnerability. If immediate patching is not feasible, appropriate mitigation measures should be implemented. IT security teams should monitor for signs of exploitation and review access controls.