CVE-2026-85969 Progress Software Corporation CVE debrief

Who should care

Defenders responsible for Progress MarkLogic Server deployments, particularly those with remote authenticated users or language-processing functionality, should assess exposure and potential impact.

Why it matters

CVE-2026-85969 is a high-severity vulnerability in Progress MarkLogic Server that could lead to server instability or limited data modification if exploited by remote authenticated attackers. Defenders should prioritize verifying exposure, assessing potential impact, and implementing compensating controls.

• Server instability or crashes may occur if exploited
• Limited modification of data may be possible for remote authenticated attackers
• Defenders should verify exposure and assess potential impact on language-processing functionality
• Remediation priority is high for affected MarkLogic Server versions

Technical summary

The vulnerability is an out-of-bounds write issue in certain language-processing functionality of Progress MarkLogic Server. Affected versions are 12.x before 12.1.0 and 11.x before 11.3.7. A remote authenticated attacker could exploit this vulnerability to cause server instability or limited modification of data. The issue is related to language-processing functionality, which may be exposed to remote authenticated users. Defenders should prioritize verifying exposure and assessing potential impact, focusing on remote authenticated users and language-processing functionality.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, focusing on remote authenticated users and language-processing functionality.

Recommended defensive actions

• Verify exposure by checking MarkLogic Server versions and configurations
• Assess potential impact on language-processing functionality
• Implement compensating controls for remote authenticated users
• Monitor for signs of server instability or data modification
• Review vendor guidance for affected versions
• Conduct an inventory of affected assets
• Track remediation progress and verify fixes

Evidence notes

The CVE Program and NVD provide official records of the vulnerability. Progress Software Corporation has released a critical security alert bulletin addressing the issue. The vulnerability affects Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7. Evidence is based on official CVE and NVD records, as well as a vendor advisory.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.