Product by Progress
Progress Software MarkLogic Server
10 known vulnerabilities in Progress Software MarkLogic Server (Progress), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-9192 | Authentication bypass in Progress MarkLogic Server ODBC App Server | 9.8 | |
| Critical | CVE-2026-9190 | HTTP request smuggling in Progress MarkLogic Server | 9.1 | |
| Critical | CVE-2026-9195 | Cross-site scripting in Progress MarkLogic Server Query Console | 9.3 | |
| Critical | CVE-2026-7329 | Privilege escalation in Progress MarkLogic Server REST query interfaces | 9.9 | |
| Critical | CVE-2026-9193 | Privilege escalation in Progress MarkLogic Server Hadoop integration | 9.9 | |
| Critical | CVE-2026-8709 | Privilege escalation in Progress MarkLogic Server REST document patch operation | 9.9 | |
| Critical | CVE-2026-7557 | SAML authentication bypass in Progress MarkLogic Server | 9.1 | |
| High | CVE-2026-7327 | Privilege escalation in Progress MarkLogic Server REST API document processing | 8.1 | |
| High | CVE-2026-9203 | Server-side request forgery in Progress MarkLogic Server | 8.5 | |
| High | CVE-2026-7326 | Cross-site request forgery in Progress MarkLogic Server Admin UI | 8.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,