Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Claris FileMaker Server 26.0.3 Clear all filters
TI-2026-59422 CVE-2026-86934 · GHSA-wwj7-3493-4j3w

Authorization bypass in Claris FileMaker Server

Priority MEDIUM 47

An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publishing with XML setting and access the XM…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00315 Published 2026-09-23 Fixed in 26.0.3 CWE-639
TI-2026-59420 CVE-2026-86926 · GHSA-9vrp-wjh8-mfg5

Heap-based buffer overflow in Claris FileMaker Server

Priority LOW 35

A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption, potentially leading to arbitrary code exec…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00128 Published 2026-09-23 Fixed in 26.0.3 CWE-122
TI-2026-59421 CVE-2026-86930 · GHSA-xgrq-55wj-qj6g

Out-of-bounds read in Claris FileMaker Server

Priority MEDIUM 47

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebD…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0029 Published 2026-09-23 Fixed in 26.0.3 CWE-125