CVE-2026-9193 in MarkLogic Server

Riassunto

di MITRE • 05/08/2026

An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: ProgressSoftware
• Prenotare: 21/05/2026
• Divulgazione: 05/08/2026
• Moderazione: accettato
• Voce: VDB-386287
• CPE: pronto
• CWE: CWE-269 (confermato)
• CVSS: 9.9 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-9193
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-9193
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-9193/