CVE-2026-85969
High
Description
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality. A remote authenticated attacker could exploit this vulnerability to cause server instability or limited modification of data.
SeverityHigh
CVSS7.1
Exploit probability—
ProductMarkLogic Server
PublishedOct 12, 2026
First seenOct 12, 2026
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- Progress Software Corporation MarkLogic Server11.3.7, 12.1.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Progress Software Corporation MarkLogic Server | 11.0.0 ≤ v < 11.3.7, 12.0.0 ≤ v < 12.1.0 | 11.3.7, 12.1.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.