Progress Software Corporation Marklogic Server vulnerabilities

31 CVEs affecting Progress Software Corporation Marklogic Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-85976, published 2026-10-12.

More from Progress Software Corporation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-85955, published 2026-10-12. Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the…
• CVE-2026-85961, published 2026-10-12. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain…
• CVE-2026-85964, published 2026-10-12. High severity, CVSS 7.7. EPSS: 0.4% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which…
• CVE-2026-85948, published 2026-10-12. Critical severity, CVSS 9.9. EPSS: 0.3% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote attacker with…
• CVE-2026-85947, published 2026-10-12. Critical severity, CVSS 9.9. EPSS: 0.3% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations. A remote attacker with forest-management…
• CVE-2026-85950, published 2026-10-12. High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrative privileges to access…
• CVE-2026-85963, published 2026-10-12. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could allow an unauthenticated remote attacker…
• CVE-2026-85957, published 2026-10-12. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintended network access or…
• CVE-2026-85959, published 2026-10-12. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability…
• CVE-2026-85956, published 2026-10-12. Critical severity, CVSS 9.6. EPSS: 0.3% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations…

Latest

• CVE-2026-85976, published 2026-10-12. Medium severity, CVSS 5.4. EPSS: 0.1% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP…
• CVE-2026-85975, published 2026-10-12. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept…
• CVE-2026-85974, published 2026-10-12. High severity, CVSS 7.4. EPSS: 0.1% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections. A network-positioned…
• CVE-2026-85973, published 2026-10-12. High severity, CVSS 7.4. EPSS: 0.1% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could intercept or modify information…
• CVE-2026-85972, published 2026-10-12. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based…
• CVE-2026-85971, published 2026-10-12. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to…
• CVE-2026-85970, published 2026-10-12. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow crafted XML to cause…
• CVE-2026-85969, published 2026-10-12. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality. A remote authenticated…
• CVE-2026-85968, published 2026-10-12. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality. A remote authenticated attacker could exploit this…
• CVE-2026-85967, published 2026-10-12. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context…