Skip to content
OpenAdvisories
High · 7.4 CVE-2026-85973 EUVD-2026-97570GHSA-qfrq-cw8g-3w8m

Cleartext transmission in Progress MarkLogic Server cluster join operations

Published Oct 12, 2026 · Updated Oct 14, 2026 · Assigned by ProgressSoftware

Description

Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could intercept or modify information transmitted through an affected connection.

Affected products

VendorProductAffectedFixed
Progress Software MarkLogic Server 12.0.0 – < 12.1.0 12.1.0

References