CVE-2026-86938: Claris Filemaker Pro

High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days.

A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed in FileMaker Pro version 26.0.3.

Affected products

• Claris Filemaker Pro: before 26.0.3 (fixed in 26.0.3)

Published 2026-09-23. Last modified 2026-10-05.