CVE-2026-85976
HTTP response splitting in Progress MarkLogic Server Query Console
CVSS score
5.4
EPSS probability
%0.1
Risk score
0.0
Published
1 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-9192
Authentication bypass in Progress MarkLogic Server ODBC App Server
PS
Patch status unknownEPSS %1
9.1
CVE-2026-9190
HTTP request smuggling in Progress MarkLogic Server
PS
Patch status unknownEPSS %1
9.3
CVE-2026-9195
Cross-site scripting in Progress MarkLogic Server Query Console
PS
Patch status unknownEPSS %1
8.8
CVE-2026-65941
WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.
PS
Patch status unknownEPSS %1
9.9
CVE-2026-7329
Privilege escalation in Progress MarkLogic Server REST query interfaces
PS
Patch status unknownEPSS %1
9.9
CVE-2026-9193
Privilege escalation in Progress MarkLogic Server Hadoop integration
PS
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-85976"