medium4.8
CVE-2026-18372
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user inte…
Impact
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| M-Files | M-Files Web | before 26.8.16330.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.