Veille CVE

Vendredi 16 octobre 2026

3 CVE

Critique 0 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Progress Software Corporation MarkLogic Server » ✕
  1. CVE-2026-85976 5.4 Moyenne

    Progress Software Corporation MarkLogic Server

    Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-side response handling.

  2. CVE-2026-85957 7.5 Élevée

    Progress Software Corporation MarkLogic Server

    Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintended network access or information disclosure.

  3. CVE-2026-85949 8.1 Élevée

    Progress Software Corporation MarkLogic Server

    Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected resources.