CVE-2026-85956Improper privilege management in Progress MarkLogic Server backup and restore operations

Descripción

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or modification of security-critical data.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-October-2026 vendor-advisory