cvedb.io
CVE-2026-9192
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2026-08-05T16:17:10.063 · Last modified 2026-08-05T19:17:47.317

Summary

An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.