CVE-2026-86934

Summary

This vulnerability allows unauthorized access to the XML Web Publishing interface by bypassing the Custom Web Publishing with XML setting through an extended privilege header, posing a significant security risk.

Exploitability

Exploitation requires sending a request with a specific extended privilege header, which is moderately difficult and requires knowledge of the header format.

Blast radius

If exploited, this could lead to unauthorized access to sensitive XML Web Publishing data, compromising the integrity and confidentiality of the affected system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to FileMaker Server version 26.0.3 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.