CVE-2026-85949
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record…
- Risk score
- 52/100
- CVSS
- 8.1 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 12 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected resources.
- Affected
- See advisory
- Fix
- Upgrade the product to 12.1.0 or 11.3.7 (whichever matches your release line), or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 8.1 high
References
Original description
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected resources.
Last activity 12 Oct 2026. Patch Forecast updates every hour.