CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 09:00 UTC )
This week: 5,435 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,435 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product progress_software:marklogic_server . Show all products
41 CVEs, showing 1 to 41
CVE Severity Title Published CVE-2026-7326 High 7.5 Cross-site request forgery in Progress MarkLogic Server Admin UI Assigned by ProgressSoftware
Aug 5, 2026 CVE-2026-7327 High 8.1 Privilege escalation in Progress MarkLogic Server REST API document processing Assigned by ProgressSoftware
Aug 5, 2026 CVE-2026-7329 Critical 9.9 Privilege escalation in Progress MarkLogic Server REST query interfaces Assigned by ProgressSoftware
Aug 5, 2026 CVE-2026-7557 Critical 9.1 SAML authentication bypass in Progress MarkLogic Server Assigned by ProgressSoftware
Aug 5, 2026 CVE-2026-8709 Critical 9.9 Privilege escalation in Progress MarkLogic Server REST document patch operation Assigned by ProgressSoftware
Aug 5, 2026 CVE-2026-9190 Critical 9.1 HTTP request smuggling in Progress MarkLogic Server Assigned by ProgressSoftware
Aug 5, 2026 CVE-2026-9192 Critical 9.8 Authentication bypass in Progress MarkLogic Server ODBC App Server Assigned by ProgressSoftware
Aug 5, 2026 CVE-2026-9193 Critical 9.9 Privilege escalation in Progress MarkLogic Server Hadoop integration Assigned by ProgressSoftware
Aug 5, 2026 CVE-2026-9195 Critical 9.3 Cross-site scripting in Progress MarkLogic Server Query Console Assigned by ProgressSoftware
Aug 5, 2026 CVE-2026-9203 High 8.5 Server-side request forgery in Progress MarkLogic Server Assigned by ProgressSoftware
Aug 5, 2026 CVE-2026-9191 Critical 9.6 Insufficient isolation of user-supplied code in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85947 Critical 9.9 Improper privilege management in Progress MarkLogic Server forest operations Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85948 Critical 9.9 Improper privilege management in Progress MarkLogic Server Management API Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85949 High 8.1 Sensitive information exposure in Progress MarkLogic Server trace logs Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85950 High 8.4 Improper privilege management in Progress MarkLogic Server REST extensions Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85951 High 8.5 Server-side request forgery in Progress MarkLogic Server Azure deployments Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85952 High 8.5 Server-side request forgery in Progress MarkLogic Server Linux cloud deployments Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85953 High 8.5 Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85954 High 8.6 Improper privilege management in Progress MarkLogic Server higher-order XQuery functions Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85955 Critical 9.9 Improper privilege management in Progress MarkLogic Server xdmp:eval-in Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85956 Critical 9.6 Improper privilege management in Progress MarkLogic Server backup and restore operations Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85957 High 7.5 Improper XML external entity restriction in Progress MarkLogic Server SAML processing Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85958 High 7.5 Improper OAuth token validation in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85959 High 7.5 Insufficient authentication logging in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85960 High 7.5 Cross-site request forgery in Progress MarkLogic Server Query Console Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85961 High 7.5 Sensitive information exposure in Progress MarkLogic Server Azure deployments Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85962 High 7.5 Improper authentication in Progress MarkLogic Server SAML processing Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85963 High 7.5 Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85964 High 7.7 Path traversal in Progress MarkLogic Server Query Console Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85965 High 8.0 Use-after-free in Progress MarkLogic Server JavaScript engine integration Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85966 High 7.7 Exposure of sensitive information in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85967 Medium 6.1 Cross-site scripting in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85968 High 7.1 Out-of-bounds read in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85969 High 7.1 Out-of-bounds write in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85970 High 7.1 Improper XML external entity restriction in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85971 High 7.1 Incorrect log file permissions in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85972 High 7.4 Improper Kerberos server verification in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85973 High 7.4 Cleartext transmission in Progress MarkLogic Server cluster join operations Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85974 High 7.4 Improper TLS hostname verification in Progress MarkLogic Server Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85975 High 7.5 Cleartext transmission in Progress MarkLogic Server Amazon S3 connections Assigned by ProgressSoftware
Oct 12, 2026 CVE-2026-85976 Medium 5.4 HTTP response splitting in Progress MarkLogic Server Query Console Assigned by ProgressSoftware
Oct 12, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
