Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Progress Software MarkLogic Server 31-flaw security update

Security Patch Release
First reported
Last updated
Happening score
H score 35
1 unique sources, 1 articles

Summary

Hide ▲

Progress Software published 31 MarkLogic Server flaws and the associated fixes, including five critical vulnerabilities that can let a lesser-privileged account gain persistent administrator control. The update applies to MarkLogic 11.x before 11.3.7 and 12.x before 12.1.0. Fixes have been available since September 10, and Progress says there is no workaround for customers who cannot upgrade yet. The company says it has no evidence of exploitation, and the flaws were not in CISA's KEV catalog when checked.

Related Happenings

SonicWall security patch release for CVE-2026-15409

Security Patch Release
H score54 First: 15.07.2026 00:23 Last: 15.07.2026 00:23 Sources 1

About this happening: SonicWall released hotfix security updates for SMA1000 appliances after confirming active exploitation of CVE-2026-15409 and CVE-2026-15410. The fixes are availabl...

Open Happening

Progress Software security patch release for CVE-2026-4670

Security Patch Release
H score44 First: 04.05.2026 19:34 Last: 04.05.2026 19:34 Sources 1

About this happening: Progress Software has released MOVEit Automation updates to fix CVE-2026-4670 and CVE-2026-5174, including a critical authentication bypass that could expose e...

Open Happening

Timeline

  1. 13.10.2026 11:44 2 articles · 3h ago

    MarkLogic 11.3.7 and 12.1.0 fixes become available

    Mitigation Patch Update

    Progress Software made fixes available for MarkLogic 11.3.7 and MarkLogic 12.1.0 to address the newly disclosed MarkLogic Server flaws affecting 11.x before 11.3.7 and 12.x before 12.1.0.

    Show sources
    Open in new tab
  2. 13.10.2026 11:44 1 articles · 3h ago

    Progress Software publishes 31 MarkLogic Server flaws

    Initial Disclosure

    Progress Software published 31 MarkLogic Server flaws, scored five of them critical, and identified issues that could let accounts with limited management privileges gain persistent administrator control or run elevated code paths on affected servers.

    Show sources
    Open in new tab