🚨 CVE-2026-8709
An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges and execute privileged operations against the Security database.
🎖@cveNotify
Progress
Marklogic Critical Security Alert Bulletin – August 2026 – (CVE-2026-7326, CVE-2026-7327, CVE-2026-7329, CVE-2026-7557, CVE-2026…
The Progress MarkLogic team confirmed several security vulnerabilities in MarkLogic Server, including privilege escalation, authentication bypass, cross-site request forgery, cross-site scripting, cross-origin resource sharing bypass, HTTP request smuggling…
September 3, 2026 26
