Skip to content
OpenAdvisories
Critical · 9.9 CVE-2026-9193 EUVD-2026-53429GHSA-3668-6qq4-jvg8

Privilege escalation in Progress MarkLogic Server Hadoop integration

Published Aug 5, 2026 · Updated Aug 7, 2026 · Assigned by ProgressSoftware

Description

An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database.

Affected products

VendorProductAffectedFixed
Progress Software MarkLogic Server 11.0.0 – < 11.3.6, 12.0.0 – < 12.0.3 11.3.6

References