CVE-2026-86938 — Claris / FileMaker Pro

CVE-2026-86938

Claris / FileMaker Pro PUBLISHED

Description (CNA)

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3.

Affected (CNA)

Vendor / product	Versions
Claris / FileMaker Pro	affected 0 before 26.0.3

CWE

No CWE identifiers supplied.

References

https://support.claris.com/s/answerview?anum=000049220&language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.