High severity8.6NVD Advisory· Published Oct 12, 2026
CVE-2026-85954
CVE-2026-85954
Description
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery functions in an elevated security context, which could result in privilege escalation beyond the attacker's granted permissions.
Affected products
1- Range: <12.1.0, <11.3.7
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.