Claris vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20253
3. 20268

Newest CVEs

• CVE-2026-86934

  An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the…

  Claris · FileMaker Server

  Critical9.1
• CVE-2026-86938

  A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges…

  Claris · FileMaker Pro

  High7.3
• CVE-2026-86926

  A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause…

  Claris · FileMaker Server

  High7.8
• CVE-2026-86930

  An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose…

  Claris · FileMaker Server

  Critical9.1
• CVE-2026-43752

  An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM…

  Claris · FileMaker Server

  Medium4.9
• CVE-2026-43680

  A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script…

  Claris · FileMaker Cloud

  High7.2
• CVE-2026-43685

  A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands…

  Claris · FileMaker Cloud

  High7.2
• CVE-2025-46320

  A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This…

  Claris · FileMaker Server

  Medium6.1
• CVE-2025-46296

  An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features…

  Claris · FileMaker Server

  Medium5.4
• CVE-2025-46295

  Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the…

  Claris · FileMaker Server

  Critical9.8