CVE-2026-86934 in FileMaker Serverinformación

Resumen

por MITRE • 2026-09-23

An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publishing with XML setting and access the XML Web Publishing interface. This vulnerability is addressed in FileMaker Server version 26.0.3.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsable

Apple

Reservar

2026-09-08

Divulgación

2026-09-23

Moderación

aceptado

Artículo

VDB-409069

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

Interested in the pricing of exploits?

See the underground prices here!