diff --git a/backend/server.js b/backend/server.js
index ccae254..6fe98ba 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -32,7 +32,7 @@ const CORS_ORIGINS = process.env.CORS_ORIGINS
 // Allowed file extensions for document uploads (documents only, no executables)
 const ALLOWED_EXTENSIONS = new Set([
     '.pdf', '.png', '.jpg', '.jpeg', '.gif', '.bmp', '.tiff', '.tif',
-    '.txt', '.csv', '.log',
+    '.txt', '.csv', '.log', '.msg', '.eml',
     '.doc', '.docx', '.xls', '.xlsx', '.ppt', '.pptx',
     '.odt', '.ods', '.odp',
     '.rtf', '.html', '.htm', '.xml', '.json', '.yaml', '.yml',
@@ -45,6 +45,7 @@ const ALLOWED_MIME_PREFIXES = [
     'application/msword', 'application/vnd.openxmlformats',
     'application/vnd.ms-', 'application/vnd.oasis.opendocument',
     'application/rtf', 'application/json', 'application/xml',
+    'application/vnd.ms-outlook', 'message/rfc822',
     'application/zip', 'application/gzip', 'application/x-7z',
     'application/x-tar', 'application/octet-stream'
 ];
diff --git a/frontend/src/App.js b/frontend/src/App.js
index 254e14c..7816134 100644
--- a/frontend/src/App.js
+++ b/frontend/src/App.js
@@ -221,7 +221,7 @@ export default function App() {
   const handleFileUpload = async (cveId, vendor) => {
     const fileInput = document.createElement('input');
     fileInput.type = 'file';
-    fileInput.accept = '.pdf,.png,.jpg,.jpeg,.gif,.bmp,.tiff,.tif,.txt,.csv,.log,.doc,.docx,.xls,.xlsx,.ppt,.pptx,.odt,.ods,.odp,.rtf,.html,.htm,.xml,.json,.yaml,.yml,.zip,.gz,.tar,.7z';
+    fileInput.accept = '.pdf,.png,.jpg,.jpeg,.gif,.bmp,.tiff,.tif,.txt,.csv,.log,.msg,.eml,.doc,.docx,.xls,.xlsx,.ppt,.pptx,.odt,.ods,.odp,.rtf,.html,.htm,.xml,.json,.yaml,.yml,.zip,.gz,.tar,.7z';
     
     fileInput.onchange = async (e) => {
       const file = e.target.files[0];