Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-85965

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain…

Risk score
51/100
CVSS
8.0 v3.1
Exploit chance (30 days)
0.2%
Published
12 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability.
Affected
See advisory
Fix
Upgrade the product to 12.1.0 or 11.3.7 (whichever matches your release line), or later.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 8.0 high

References

Original description

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability.

Last activity 12 Oct 2026. Patch Forecast updates every hour.