Vulnerabilities

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for…

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections. A network-positioned attacker could exploit this weakness to intercept or modify communications with an affected service.

Read at NIST National Vulnerability Database (CVE API 2.0)

CVSS

7.4

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-85974 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 3
   CVE NVD 19d ago

   Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console…

   CVSS 5.4 CVE-2026-85976
2. 15
   CVE NVD 19d ago

   Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by…

   CVSS 7.5 CVE-2026-85975 Amazon Web Services
3. 28
   CVE NVD 19d ago

   Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos…

   CVSS 7.4 CVE-2026-85972 Microsoft
4. 10
   CVE NVD 19d ago

   Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain…

   CVSS 7.7 CVE-2026-85966
5. 21
   CVE NVD 19d ago

   On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive…

   CVSS 7.5 CVE-2026-85961 Microsoft
6. 10
   CVE NVD 19d ago

   Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in…

   CVSS 7.5 CVE-2026-85959