Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

As cited

Copy frozen at 2026-10-13 12:20 UTC (site build).

vulnerabilities

Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

Progress Software disclosed 31 vulnerabilities in MarkLogic Server on October 12, with five rated critical. Two of the flaws allow accounts with delegated management privileges to escalate to full administrator control, with patches available since September 10 in versions 11.3.7 and 12.1.0.

Why it matters: Organizations running MarkLogic deployments with delegated administrator accounts face privilege escalation risk and should apply patches immediately to prevent unauthorized persistent access.

Source published

2026-10-13 08:44 UTC

First seen by Cybersecurity Tracker

2026-10-13 11:38 UTC