CVE-2026-85961: falha de alta gravidade em Progress Software Corporation MarkLogic Server
Sensitive information exposure in Progress MarkLogic Server Azure deployments
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.5%
On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected cloud resources.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Progress Software Corporation · MarkLogic ServerCVEs relacionadas — Progress Software Corporation MarkLogic Server
No mesmo produto, das mais perigosas para as menos.
CVE-2026-9192CRITICALAuthentication bypass in Progress MarkLogic Server ODBC App ServerEPSS 0.8%CVE-2026-9190CRITICALHTTP request smuggling in Progress MarkLogic ServerEPSS 0.7%CVE-2026-9195CRITICALCross-site scripting in Progress MarkLogic Server Query ConsoleEPSS 0.7%CVE-2026-85955CRITICALImproper privilege management in Progress MarkLogic Server xdmp:eval-inEPSS 0.6%CVE-2026-7329CRITICALPrivilege escalation in Progress MarkLogic Server REST query interfacesEPSS 0.6%CVE-2026-85964HIGHPath traversal in Progress MarkLogic Server Query ConsoleEPSS 0.5%