CVE-2026-43752
Received Received - Intake

Authenticated Code Execution in FileMaker Server via Malicious File Upload

Publication date: 2026-07-09

Last updated on: 2026-07-09

Assigner: Apple Inc.

Description
An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-09
Last Modified
2026-07-09
Generated
2026-07-09
AI Q&A
2026-07-09
EPSS Evaluated
N/A
NVD
CVE-2026-43752
EUVD
EUVD-2026-42652

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
claris filemaker_server 26.0.1
apple filemaker_server 26.0.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an authenticated administrator to execute arbitrary code on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console of FileMaker Server.

It means that someone with administrator access could potentially run harmful software on the server by exploiting this upload feature.

Impact Analysis

If exploited, this vulnerability could allow an attacker with administrator credentials to run arbitrary code on the server hosting FileMaker Server.

This could lead to unauthorized control over the server, data breaches, disruption of services, or installation of malware.

Mitigation Strategies

To mitigate this vulnerability, you should update FileMaker Server to version 26.0.1 or later, as this version addresses the arbitrary code execution issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-43752. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart