{"id":"CVE-2025-11681","details":"Denial-of-service condition in M-Files Server versions before 25.11.15392.1, before 25.2 LTS SR2 and before 25.8 LTS SR2 allows an authenticated user to cause the MFserver process to crash.","modified":"2026-03-12T17:34:20.519329Z","published":"2025-11-17T12:15:43.250Z","references":[{"type":"ADVISORY","url":"https://empower.m-files.com/security-advisories/CVE-2025-11681"},{"type":"ADVISORY","url":"https://product.m-files.com/security-advisories/cve-2025-11681/"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"25.2.14524.13"}]},{"events":[{"introduced":"0"},{"fixed":"25.11.15392.1"}]},{"events":[{"introduced":"25.8.15085.13"},{"fixed":"25.8.15085.17"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-11681.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}