CVE-2026-85957

Progress MarkLogic Server versions 11.x prior to 11.3.7 are vulnerable to an improper XML external entity restriction within the SAML processing component. The underlying cause is a SAML parser configuration that permits the processing of external DTDs or entities . This vulnerability could lead ...