PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-85965 Progress Software Corporation CVE debrief

Progress MarkLogic Server contains a use-after-free vulnerability in its JavaScript engine integration, potentially leading to memory corruption, controlled process failure, or server instability. This issue affects MarkLogic Server 11.x versions before 11.3.7 and 12.x versions before 12.1.0. The vulnerability could result in memory corruption, controlled process failure, or server instability. Defenders should assess their exposure and prioritize patching or mitigation, especially for publicly exposed instances or those supporting key infrastructure. The CVE Program and NVD provide official records of this vulnerability. Progress Software Corporation has released an advisory for

Vendor
Progress Software Corporation
Product
MarkLogic Server
CVSS
HIGH 8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-12
Original CVE updated
2026-10-12
Advisory published
2026-10-12
Advisory updated
2026-10-12

Who should care

Defenders responsible for MarkLogic Server instances, especially those exposed to the internet or critical infrastructure, should assess their exposure and prioritize patching or mitigation.

Why it matters

Defenders should prioritize patching or mitigating CVE-2026-85965 due to the potential for memory corruption, controlled process failure, or server instability in Progress MarkLogic Server instances. This is especially critical for publicly exposed instances or those supporting key infrastructure.

  • Potential memory corruption leading to server instability.
  • Possible controlled process failure requiring manual intervention.
  • Risk of exploitation attempts targeting publicly exposed instances.

Technical summary

The Progress MarkLogic Server contains a use-after-free vulnerability in its JavaScript engine integration. This could result in memory corruption, controlled process failure, or server instability. Affected versions include MarkLogic Server 11.x releases before 11.3.7 and 12.x releases before 12.1.0.

Defensive priority

Defenders should prioritize patching or mitigating this vulnerability, especially for publicly exposed MarkLogic Server instances.

Recommended defensive actions

  • Apply patches or updates from Progress Software Corporation for affected MarkLogic Server versions.
  • Implement compensating controls, such as network segmentation or access restrictions, for publicly exposed MarkLogic Server instances.
  • Monitor MarkLogic Server logs for potential exploitation attempts or anomalies.

Evidence notes

The CVE Program and NVD provide official records of this vulnerability. Progress Software Corporation has released an advisory for this issue. The vulnerability affects MarkLogic Server 11.x versions before 11.3.7 and 12.x versions before 12.1.0. Defenders should verify affected scope, severity, and vendor guidance. The issue could lead to memory corruption, controlled process failure, or server instability. There are limited details on exploitation attempts or anomalies. Official CVE

Sources and references

Verified primary and authoritative sources

  • CVE-2026-85965 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-85965

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-85965 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-85965

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.