CVE-2026-85957 | Progress MarkLogic Server up to 11.3.6 SAML parser xml external entity reference

October 12, 2026 Yanac

A vulnerability was found in Progress MarkLogic Server up to 11.3.6. It has been declared as critical. This affects an unknown function of the component SAML parser. The manipulation results in xml external entity reference.

This vulnerability is known as CVE-2026-85957. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More