CVE-2026-85976: CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers in Progress Software Corporation MarkLogic Server

Progress MarkLogic Server versions >=11.0.0 <11.3.7 and >=12.0.0 <12.1.0 contain a vulnerability (CWE-113) where the Query Console file-exploration endpoint insufficiently sanitizes input used in HTTP headers. This flaw enables HTTP response splitting attacks, which can manipulate how client browsers process server responses. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity, with network attack vector, low attack complexity, requiring low privileges and user interaction, and impacts confidentiality and integrity with no impact on availability.

Successful exploitation could allow an attacker to perform HTTP response splitting via the Query Console file-exploration endpoint, potentially leading to unintended client-side response handling such as cache poisoning or cross-site scripting. The impact affects confidentiality and integrity but does not affect availability. There are no known exploits in the wild at this time.

No explicit patch or remediation details are provided in the vendor advisory. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid exposing the Query Console file-exploration endpoint to untrusted users or networks to reduce risk.