CVE-2026-18372
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 19, 2026
Vendor
unknown
Description
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users.