NewsThe Hacker News13.10.2026SME Finance Public sector

Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0. Affected

Other advisories

MediumCVE-2026-85976Progress Software MarkLogic Server: HTTP Response Splitting
HighCVE-2026-85972Progress Software MarkLogic Server: fehlerhafte Implementierung der Authentifizierung
HighCVE-2026-85964Progress Software MarkLogic Server: Verzeichnisauflösung (Path Traversal)
HighCVE-2026-85963Progress Software Corporation MarkLogic Server: hartcodierter kryptografischer Schlüssel
MediumCVE-2026-85976MarkLogic Server 12.
HighCVE-2026-85975Die Progress MarkLogic Server 12.
HighCVE-2026-85974MarkLogic Server 12.
HighCVE-2026-85973Die Progress MarkLogic Server 12.

Source: https://thehackernews.com/2026/10/two-critical-marklogic-flaws-could-give.html

More on MarkLogic

Other advisories