CVE-2026-85950 Improper privilege management in Progress MarkLogic Server REST extensions

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrative privileges to access authentication material associated with higher-privileged users, potentially resulting in unauthorized...

CVE-2026-85950 Improper privilege management in Progress MarkLogic Server REST extensions

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrative privileges to access authentication material associated with higher-privileged users, potentially resulting in unauthorized...

CVE-2026-85950

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are affected by an authorization flaw within the REST extensions . This improper privilege management allows a remote attacker with administrative privileges to access authentication material belonging to higher-privileg...