Critical Progress MarkLogic Server security flaws Could Enable Code Execution and Privilege Escalation

What happened

Progress has disclosed 31 vulnerabilities in MarkLogic Server that could lead to privilege escalation (gaining powers on a system that the user was not given), server-side code execution, authentication bypass, credential exposure, and data compromise. Read Critical Progress MarkLogic Server Vulnerabilities Could Enable Code Execution and Privilege Escalation By Divya October 13, 2026 Share Facebook Twitter Pinterest WhatsApp Progress has disclosed 31 vulnerabilities in MarkLogic Server that could lead to privilege escalation, server-side code execution, authentication bypass, credential exposure, and data compromise.

Progress identifies MarkLogic Server versions 12.1 and 11.3.7 as the patched releases. In its security bulletin dated October 12, 2026, the company urges customers to install updates, warning that affected instances may operate normally without any prior signs of exploitation.

The bulletin covers […] The post Critical Progress MarkLogic Server Vulnerabilities Could Enable Code Execution and Privilege Escalation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform . CVE/vulnerability Cyber Security News Vulnerability 3 min.

The bulletin covers MarkLogic Server versions 12.0 through 12.0.3 and 11.0 through 11.3.6. The impact of each vulnerability varies depending on the platform, enabled features, and configuration. Progress has not fully assessed retired versions, including version 10 and earlier, and will not provide fixes.