CVE-2026-43685

HighCVSS 7.2

Published: 12/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

39th percentile - higher than 39% of all known CVEs

Summary

A Remote Code Execution vulnerability in Claris FileMaker Cloud allows a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature.

Risk Assessment

This vulnerability could lead to unauthorized control over the system, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to FileMaker Cloud version 2.22.0.5 to mitigate this vulnerability.

Other vulnerabilities in Claris FileMaker Cloud

CVE-2026-43680High
A Remote Code Execution vulnerability in Claris FileMaker Cloud allows a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule types and execute arbitrary operating system commands on the underlying host.

Original NVD description (English source)

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature. This issue is fixed in FileMaker Cloud 2.22.0.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS