Paper/Archive/CVE-2026-86930

CVE-2026-86930

Claris FileMaker Server — An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a conta…

EPSS 0.3%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (ADP, NVD agree)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 21.6.216 × 204.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3.

Affected

ProductAffectedFixed inSource

FileMaker Server< 26.0.326.0.3CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.claris.com/s/answerview?anum=000049218&language=en_US