CVE-2026-43685

HIGH CVSS 7.2 View on NVD ↗

Description

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature. This issue is fixed in FileMaker Cloud 2.22.0.5.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://support.claris.com/s/answerview?anum=000049154&language=en_US

Published: May 12, 2026 23:16 UTC Modified: May 13, 2026 14:49 UTC