CVE-2026-85948 in MarkLogic Serverinformazioni

Riassunto

di MITRE • 12/10/2026

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote attacker with manage-user-level privileges could exploit this flaw to obtain persistent unauthorized administrative control.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

ProgressSoftware

Prenotare

04/09/2026

Divulgazione

12/10/2026

Moderazione

accettato

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-85948
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85948
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-85948/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!