What is the CVSS score of EUVD-2026-29879?

EUVD-2026-29879 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of FileMaker Cloud are affected by EUVD-2026-29879?

Claris FileMaker Cloud versions prior to 2.22.0.5 contain a remote code execution vulnerability affecting authenticated administrators, allowing arbitrary operating system command execution through…. A patch is available.

How to fix or mitigate EUVD-2026-29879?

Within 24 hours: Inventory all Claris FileMaker Cloud instances and identify current version levels. Within 7 days: Apply vendor patch to FileMaker Cloud version 2.22.0.5 or later across all administrative environments; prioritize production instances. Within 30 days: Conduct access review of Admin Console privilege assignments and implement principle of least privilege; review ODBC connection configurations and restrict external data source testing capabilities where not operationally required.

FileMaker Cloud EUVD-2026-29879

| CVE-2026-43685 HIGH

OS Command Injection (CWE-78)

2026-05-12 apple

GHSA-vxm5-52jm-vr7c

RCE Command Injection

7.2

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

May 13, 2026 - 15:57 vuln.today

CVSS changed

May 13, 2026 - 15:52 NVD

7.2 (None) 7.2 (HIGH)

Patch available

May 13, 2026 - 02:01 EUVD

CVE Published

May 12, 2026 - 22:24 nvd

UNKNOWN (no severity yet)

CVE Published

May 12, 2026 - 22:24 nvd

HIGH 7.2

DescriptionNVD

A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature. This issue is fixed in FileMaker Cloud 2.22.0.5.

AnalysisAI

Remote code execution in Claris FileMaker Cloud allows authenticated administrators to execute arbitrary operating system commands via command injection in the External ODBC Data Source connection test feature. The vulnerability requires Admin Console privileges (PR:H) but no user interaction, enabling complete system compromise with high impact to confidentiality, integrity, and availability. …

RemediationAI

Within 24 hours: Inventory all Claris FileMaker Cloud instances and identify current version levels. Within 7 days: Apply vendor patch to FileMaker Cloud version 2.22.0.5 or later across all administrative environments; prioritize production instances. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

EUVD-2026-29879 vulnerability details – vuln.today

Back

FileMaker Cloud EUVD-2026-29879

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code