ByteOS Network

NVD Vulnerability Details :

CVE-2026-43685

Analyzed

Source-product-security@apple.com

Published At-12 May, 2026 | 23:16

Updated At-14 May, 2026 | 13:52

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature. This issue is fixed in FileMaker Cloud 2.22.0.5.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 7.2

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CPE Matches

Claris International Inc.

>>filemaker_cloud>>Versions before 2.22.0.5(exclusive)

cpe:2.3:a:claris:filemaker_cloud:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-78	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-78

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://support.claris.com/s/answerview?anum=000049154&language=en_US	product-security@apple.com	Vendor Advisory

Hyperlink: https://support.claris.com/s/answerview?anum=000049154&language=en_US

Source: product-security@apple.com

Resource:

Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History