CVE-2026-8709

Progress MarkLogic Server contains an improper privilege management vulnerability in the REST API document patch operation. An authenticated user with a low-privileged REST role can escalate privileges and perform privileged operations against the Security database. Affected versions are before 1...

EUVD-2026-53425

An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges and execute privileged operations against the Security database...