CVE-2026-9193: Progress Marklogic Server

Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days.

An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database.

Affected products

• Progress Marklogic Server: before 11.3.6 (fixed in 11.3.6); from 12.0.0, before 12.0.3 (fixed in 12.0.3)

Published 2026-08-05. Last modified 2026-09-03.