CVE-2026-86938
Undergoing Analysis Undergoing Analysis - In Progress

DLL Hijacking in FileMaker Pro Windows Installer

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: Apple Inc.

Description
A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-23
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-86938
EUVD
EUVD-2026-85430

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
filemaker filemaker_pro 26.0.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a DLL hijacking vulnerability in the FileMaker Pro installer for Windows. It allows a local user to run arbitrary code with admin rights by placing a malicious DLL file in the installer directory. The issue is fixed in FileMaker Pro version 26.0.3.

Detection Guidance

Check for suspicious DLL files in directories where FileMaker Pro installer runs. Look for unexpected files with .dll extension in the installer folder or system paths. Use commands like 'dir /s /b *.dll' in Command Prompt to list all DLL files.

Impact Analysis

If exploited, an attacker could gain full control of your system with administrator privileges. This could lead to data theft, malware installation, or unauthorized system changes. Only affects users running the vulnerable installer.

Mitigation Strategies

Update FileMaker Pro to version 26.0.3 or later. Remove any untrusted DLL files from installer directories. Restrict write permissions in directories where the installer runs to prevent unauthorized file placement.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86938. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart