CVE-2026-9192: CWE-287: Improper Authentication in Progress Software Corporation MarkLogic Server
CVE-2026-9192 is a critical authentication bypass vulnerability in the ODBC App Server component of Progress Software Corporation's MarkLogic Server. It affects versions 11.0.0 and 12.0.0. This flaw allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user on the server, including administrators. The vulnerability has a CVSS score of 9.8, indicating a high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.
AI Analysis
Technical Summary
An authentication bypass vulnerability (CWE-287) exists in the ODBC App Server of Progress MarkLogic Server versions 11.0.0 and 12.0.0. This flaw permits unauthenticated remote attackers to circumvent password verification, enabling them to execute queries with the privileges of any named user known to the server, including administrative accounts. The vulnerability is publicly documented as CVE-2026-9192 with a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No vendor-provided patch or official remediation level is currently available, and the product is not a cloud service, so remediation depends on vendor updates. No active exploitation has been reported.
Potential Impact
Successful exploitation allows an unauthenticated remote attacker to bypass authentication controls and execute arbitrary queries with the privileges of any user, including administrators. This compromises confidentiality, integrity, and availability of the affected MarkLogic Server instance. The attacker gains full control over the database queries, potentially leading to data disclosure, modification, or denial of service.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the ODBC App Server component to trusted users only and monitor for unusual query activity. No vendor advisory or patch links are currently available, so follow Progress Software Corporation's updates closely for official fixes.
CVE-2026-9192: CWE-287: Improper Authentication in Progress Software Corporation MarkLogic Server
Description
CVE-2026-9192 is a critical authentication bypass vulnerability in the ODBC App Server component of Progress Software Corporation's MarkLogic Server. It affects versions 11.0.0 and 12.0.0. This flaw allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user on the server, including administrators. The vulnerability has a CVSS score of 9.8, indicating a high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.
CVSS v3.1
Score 9.8critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
An authentication bypass vulnerability (CWE-287) exists in the ODBC App Server of Progress MarkLogic Server versions 11.0.0 and 12.0.0. This flaw permits unauthenticated remote attackers to circumvent password verification, enabling them to execute queries with the privileges of any named user known to the server, including administrative accounts. The vulnerability is publicly documented as CVE-2026-9192 with a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No vendor-provided patch or official remediation level is currently available, and the product is not a cloud service, so remediation depends on vendor updates. No active exploitation has been reported.
Potential Impact
Successful exploitation allows an unauthenticated remote attacker to bypass authentication controls and execute arbitrary queries with the privileges of any user, including administrators. This compromises confidentiality, integrity, and availability of the affected MarkLogic Server instance. The attacker gains full control over the database queries, potentially leading to data disclosure, modification, or denial of service.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the ODBC App Server component to trusted users only and monitor for unusual query activity. No vendor advisory or patch links are currently available, so follow Progress Software Corporation's updates closely for official fixes.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- ProgressSoftware
- Date Reserved
- 2026-05-21T15:17:40.656Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7360c9bf8831d539228d6a
Added to database: 08/05/2026, 16:11:53 UTC
Last enriched: 08/05/2026, 16:27:11 UTC
Last updated: 08/05/2026, 16:27:11 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.