Skip to content
OpenAdvisories
High · 7.2 CVE-2026-43680 EUVD-2026-29878GHSA-9682-24hm-2gh4

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restrict…

Published May 12, 2026 · Updated May 13, 2026 · Assigned by apple

Description

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule types and execute arbitrary operating system commands on the underlying host. This issue is fixed in FileMaker Cloud 2.22.0.5.

Affected products

VendorProductAffectedFixed
Claris FileMaker Cloud < 2.22.0.5 2.22.0.5

References