What is GHSA-wwj7-3493-4j3w?

GHSA-wwj7-3493-4j3w is a security advisory published by GitHub Security Advisories with unknown severity. An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed...

Which CVE IDs does GHSA-wwj7-3493-4j3w cover?

GHSA-wwj7-3493-4j3w covers the following CVE IDs: CVE-2026-86934. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-wwj7-3493-4j3wunknown

An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-86934 →

📋 Description

An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publishing with XML setting and access the XML Web Publishing interface. This vulnerability is addressed in FileMaker Server version 26.0.3.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-86934
https://support.claris.com/s/answerview?anum=000049217&language=en_US
https://github.com/advisories/GHSA-wwj7-3493-4j3w