CVE-2026-85970 | Progress MarkLogic Server up to 11.3.6/12.0.x xml external entity reference

October 12, 2026 Yanac

A vulnerability was found in Progress MarkLogic Server up to 11.3.6/12.0.x and classified as critical. The impacted element is an unknown function. Such manipulation leads to xml external entity reference.

This vulnerability is referenced as CVE-2026-85970. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More