CVE-2026-18371

An HTML injection vulnerability in M-Files Web prior to version 26.8.16330.2 allows authenticated attackers to manipulate the web user interface, potentially leading to unauthorized content display to other users. This could result in phishing attacks or misinformation being presented within the application. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.