importantSYS.SOURCE: The Hacker News• 2026-10-13T14:14:01+05:30

Critical Vulnerabilities in MarkLogic Server Allow Privilege Escalation to Admin Rights

#vulnerability #security #software

Two critical vulnerabilities in Progress Software's MarkLogic Server allow accounts with limited management privileges to escalate to administrator control. Patches were released in September 2026 for affected versions.

Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says.

Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0.

Affected

Read original article

*** END OF TRANSMISSION ***

> INTERACTIVE CHATBOT PLATFORM CHARACTER.AI FILES FOR CHAPTER 11 BANKRUPTCY AFTER FIVE YEARS > MOZILLA LAUNCHES FIREFOX ENTERPRISE FOR ENHANCED CORPORATE BROWSER MANAGEMENT > EFFICIENT SPEECH-TO-TEXT CONVERSION USING EMBEDDINGGEMMA 2 ON MACBOOK AIR > CHARACTER.AI FILES FOR BANKRUPTCY AMID LEGAL CHALLENGES AND DISNEY ASSET SALE > LG WEBOS SMART TVS EXPOSED TO PRE-AUTHENTICATION ROOT TAKEOVER VIA LOCAL NETWORK > BITDEFENDER AI VISIBILITY AND CONTROL: TECHNICAL OVERVIEW > RUST BORROW CHECKER SOUNDNESS HOLE EXPLOITS COVARIANT FIELD ASSIGNMENT > LEVERAGING OPENAI SUBSCRIPTIONS FOR AUDIOBOOK CREATION VIA PDF TO MP3 SERVICE > AI MODEL SELF-REPLICATION WITHOUT DATA CENTER DEPENDENCY: ANTHROPIC WARNS OF EMERGING RISK > CFTC STAFF DIRECTED TO WITHDRAW ANALYSIS OF SUSPICIOUS OIL TRADE ACTIVITIES> INTERACTIVE CHATBOT PLATFORM CHARACTER.AI FILES FOR CHAPTER 11 BANKRUPTCY AFTER FIVE YEARS > MOZILLA LAUNCHES FIREFOX ENTERPRISE FOR ENHANCED CORPORATE BROWSER MANAGEMENT > EFFICIENT SPEECH-TO-TEXT CONVERSION USING EMBEDDINGGEMMA 2 ON MACBOOK AIR > CHARACTER.AI FILES FOR BANKRUPTCY AMID LEGAL CHALLENGES AND DISNEY ASSET SALE > LG WEBOS SMART TVS EXPOSED TO PRE-AUTHENTICATION ROOT TAKEOVER VIA LOCAL NETWORK > BITDEFENDER AI VISIBILITY AND CONTROL: TECHNICAL OVERVIEW > RUST BORROW CHECKER SOUNDNESS HOLE EXPLOITS COVARIANT FIELD ASSIGNMENT > LEVERAGING OPENAI SUBSCRIPTIONS FOR AUDIOBOOK CREATION VIA PDF TO MP3 SERVICE > AI MODEL SELF-REPLICATION WITHOUT DATA CENTER DEPENDENCY: ANTHROPIC WARNS OF EMERGING RISK > CFTC STAFF DIRECTED TO WITHDRAW ANALYSIS OF SUSPICIOUS OIL TRADE ACTIVITIES