CVE-2026-85964 — Path traversal in Progress MarkLogic Server Query Console
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged file…
Published: 2026-10-12 · CVSS: 7.7 · CVSS 3.1
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7