CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

PT-2026-97424

Name of the Vulnerable Software and Affected Versions FileMaker Server versions prior to 26.0.3 Description An authorization bypass exists in the FileMaker Server Web Publishing Engine. By including a forged X-FMI-PE-ExtendedPrivilege header in a request, an attacker can bypass the disabled Custo...

CVE-2026-86934: Authorization Bypass Through User-Controlled Key

An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publishing with XML setting and access the XML Web Publishing interface. This vulnerability is addressed in FileMaker Serv...

CVE-2026-86926: Heap-based Buffer Overflow

A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption, potentially leading to arbitrary code execution. This vulnerability is addressed in FileMaker Server version 26.0.3...

CVE-2026-86938: Authorization Bypass Through User-Controlled Key

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3...

CVE-2026-86930: Out-of-bounds Read

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

PT-2026-97422

Name of the Vulnerable Software and Affected Versions FileMaker Server versions prior to 26.0.3 Description A heap buffer overflow occurs in the database engine block parsing routine. This issue allows a maliciously crafted .fmp12 database file to cause memory corruption, which could potentially...

PT-2026-97423

Name of the Vulnerable Software and Affected Versions FileMaker Server for Linux versions prior to 26.0.3 Description An out-of-bounds read occurs when an attacker uploads a specially crafted image file to a container field. This allows the disclosure of process memory during the thumbnail...

PT-2026-97425

Name of the Vulnerable Software and Affected Versions FileMaker Pro versions prior to 26.0.3 Description A DLL hijacking issue in the Windows installer allows a local user to execute arbitrary code with elevated administrator privileges. This is achieved by placing a malicious DLL file within the...

Claris FileMaker Server Admin Console - Detect

Claris FileMaker Server Admin Console panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Claris FileMaker Server Admin Console panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Claris...

Claris FileMaker WebDirect Panel - Detect

Claris FileMaker WebDirect panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Claris FileMaker WebDirect panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Claris FileMaker WebDirect...

Security Bulletin: Code injection, cross-site scripting, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency Service is vulnerable to code injection, cross-site scripting, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-46295 DESCRIPTION: Apache Commons Text versions prior to 1.10.0 included interpolation features that...

CVE-2026-43752

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1...

CVE-2026-43752

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1...

EUVD-2026-42652

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1...

CVE-2026-43752

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1...

CVE-2026-43752

An authenticated administrator can achieve arbitrary code execution on the host system by uploading a malicious file via the Open Source LLM setup feature in the Admin Console . This vulnerability is specifically identified in FileMaker Server and has been addressed in version 26.0.1 . No informa...

PT-2026-56892

Name of the Vulnerable Software and Affected Versions FileMaker Server versions prior to 26.0.1 Description An authenticated administrator can achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console...

CVE-2026-43752: Unrestricted Upload of File with Dangerous Type

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1...

CVE-2026-43680

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule types and execute arbitrary operating system commands on the underlying host. This issue is fixed in FileMaker Cloud 2.22.0.5...