CVE-2026-9192Suited to automated attack · CISA
Authentication bypass in Progress MarkLogic Server ODBC App Server
CVSS score
9.8
EPSS probability
%0.8
Risk score
0.1
Published
2 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0. Affected
Similar Vulnerabilities
9.8
CVE-2024-1212 Actively exploitedOS command injection in Progress Loadmaster
Patch status unknown Public Exploits:3EPSS %95
9.8
CVE-2017-11357 Actively exploitedVulnerability in N/a
Workaround Public Exploits:2EPSS %78
9.6
6.8
CVE-2025-13444OS command injection in Progress Loadmaster
Patch status unknownEPSS %27
8.8
CVE-2014-5287Vulnerability in Progress Loadmaster
Patch status unknown Public Exploits:3EPSS %8
6.1
CVE-2021-41318Cross-site scripting in Progress Whatsup Gold
Patch status unknown Public Exploits:2EPSS %6
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-9192"