← Back

CVE-2026-9192

nvd nist
Published: Aug 5, 2026Modified: Sep 3, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: security@progress.com (Secondary)

Description

An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators.

Affected (2)

Progress
1 product
Marklogic Server
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Progress
Marklogic Server
Before 11.3.6
Marklogic Server
From 12.0.0 to 12.0.3

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (1)

Source: security@progress.com
Vendor Advisory

Timeline

No history available yet.