VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Sep 23, 2026· Updated Oct 5, 2026

CVE-2026-86930

CVE-2026-86930

Description

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3.

Affected products

2
  • Claris/Filemaker Server2 versions
    cpe:2.3:a:claris:filemaker_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:claris:filemaker_server:*:*:*:*:*:*:*:*range: <26.0.3
    • (no CPE)range: before 26.0.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.