Skip to content
OpenAdvisories
High · 7.2 CVE-2026-43685 EUVD-2026-29879GHSA-vxm5-52jm-vr7c

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating …

Published May 12, 2026 · Updated May 13, 2026 · Assigned by apple

Vendor: Claris Product: FileMaker Cloud

Description

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature. This issue is fixed in FileMaker Cloud 2.22.0.5.

Affected products

VendorProductAffectedFixed
Claris FileMaker Cloud < 2.22.0.5 2.22.0.5

References