Vulnerability intelligence

CVE-2026-7329

Progress Software Corporation MarkLogic Server CWE-269

An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of privileged operations and unauthorized data access.

CVSS Score

9.9

Critical

EPSS — Exploit Probability

0.6%

Riskier than 45% of all CVEs · checked 2026-09-24

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories