CVE-2026-86930 — Claris / FileMaker Server

CVE-2026-86930

Claris / FileMaker Server PUBLISHED

Description (CNA)

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3.

Affected (CNA)

Vendor / product	Versions
Claris / FileMaker Server	affected 0 before 26.0.3

CWE

No CWE identifiers supplied.

References

https://support.claris.com/s/answerview?anum=000049218&language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.