CVE-2026-43680

High

Published: 12/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A Remote Code Execution vulnerability in Claris FileMaker Cloud allows a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule types and execute arbitrary operating system commands on the underlying host.

Risk Assessment

This vulnerability may lead to unauthorized access to the operating system, posing a significant threat to the organization's data security.

Recommendation

It is recommended to upgrade to FileMaker Cloud version 2.22.0.5 to mitigate this vulnerability.

Other vulnerabilities in Claris FileMaker Cloud

CVE-2026-43685High
A Remote Code Execution vulnerability in Claris FileMaker Cloud allows a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature.

Original NVD description (English source)

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule types and execute arbitrary operating system commands on the underlying host. This issue is fixed in FileMaker Cloud 2.22.0.5.