PatchSiren

Claris CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Claris CVE published 2026-07-09

CVE-2026-43752

An authenticated administrator may be able to achieve arbitrary code execution on the host system by uploading a malicious file through the Open Source LLM setup feature in the Admin Console. This vulnerability has been addressed in FileMaker Server 26.0.1. The vulnerability has a CVSS score of 4.9 and is considered medium-severity. The vulnerability requires administrative privileges to exploit.