CRITICAL 9.9 NVD

CVE-2026-9193

An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with

An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database.

References

https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August

Published: 2026-08-05 · Source: NVD · Feed updated: 2026-08-05

This critical severity vulnerability with a CVSS score of 9.9 was published on 2026-08-05 via NVD.

Risk Timeline

CVE Disclosed2026-08-05 · -1 days ago

Remediation Resources

Official Advisory

community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bul

vulnfeed aggregates 9316 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.