CVE-2026-86934
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publishing with XML setting and access the XML Web Publishing interface. This vulnerability is addressed in FileMaker Server version 26.0.3.
| Vendor | claris |
| Product | filemaker server |
| Published | Sep 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for claris filemaker server
Be the first to know when new unknown vulnerabilities affecting claris filemaker server are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Claris / FileMaker Server
0 < 26.0.3