CRITICAL 9.9 NVD

CVE-2026-7329

An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows

An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of privileged operations and unauthorized data access.

References

https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August

Published: 2026-08-05 · Source: NVD · Feed updated: 2026-08-05

This critical severity vulnerability with a CVSS score of 9.9 was published on 2026-08-05 via NVD.

Risk Timeline

CVE Disclosed2026-08-05 · -1 days ago

Remediation Resources

Official Advisory

community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bul

vulnfeed aggregates 9316 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.