{"id":"CVE-2026-85956","published":"2026-10-12T16:17:07.193","lastModified":"2026-10-14T11:17:06.097","description":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or modification of security-critical data.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cwes":["CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-October-2026","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A database administrator with delegated privileges can bypass scope restrictions to backup or restore forests outside their authorized database, potentially accessing or modifying security-critical data they shouldn't have access to.","exploitability":"Exploitation requires a remote attacker with delegated database-administrator privileges who can perform backup or restore operations, making it moderately difficult but possible given the right access level.","blast_radius":"The impact could be severe as attackers might gain unauthorized access to sensitive data across multiple databases, potentially leading to data breaches or privilege escalation across the entire MarkLogic deployment.","remediation":"Upgrade to MarkLogic Server 12.1.0 or 11.3.7 to address this privilege escalation vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","database","access-control"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:47:53.519Z"}}