CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3.

9.1 CRITICALEPSS 0.28%Not in KEVNVD: Analyzed

Last updated: 2026-10-05 18:18 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
9.1	CRITICAL	3.1NVD	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Details

CVE ID: CVE-2026-86930
Status: Analyzed
Assigner (CNA): apple
Published: Sep 23, 2026
Last modified: 2026-10-05 18:18 UTC
Weaknesses: CWE-125

Sources

NVD
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-08 08:42 UTC.