
Vulnerabilities
Critical MarkLogic Server Flaw CVE-2026-9191 Allows Session Hijacking
Progress MarkLogic Server versions before 12.1.0 and 11.3.7 contain a critical isolation flaw that permits attackers to compromise authenticated sessions.
Everything Threat Times has reported about Progress MarkLogic Server: 2 stories, newest first. Part of our Vulnerabilities coverage.

Progress MarkLogic Server versions before 12.1.0 and 11.3.7 contain a critical isolation flaw that permits attackers to compromise authenticated sessions.

A critical authorization flaw in Progress MarkLogic Server lets attackers with forest-management privileges create unauthorized administrator accounts and seize full server control.