CVE-2026-85976 | Progress MarkLogic Server up to 11.3.6/12.0.x Query Console response splitting

October 12, 2026 Yanac

A vulnerability labeled as problematic has been found in Progress MarkLogic Server up to 11.3.6/12.0.x. Affected is an unknown function of the component Query Console. The manipulation results in http response splitting.

This vulnerability is reported as CVE-2026-85976. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More