CVE-2026-9203 is a server-side request forgery (SSRF) vulnerability in Progress Software Corporation's MarkLogic Server. It affects versions 11.0.0 and 12.0.0. The flaw allows an authenticated user with low-privileged roles to bypass protections for cloud instance metadata endpoints. Exploiting this vulnerability can lead to disclosure of cloud credentials and compromise of cloud resources accessible to the affected host. The vulnerability has a high severity with a CVSS score of 8.5. No official patch or remediation guidance has been provided yet.
A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a crafted URL to execute arbitrary JavaScript in the administrator's browser session, capture credentials, and perform privileged actions on the administrator's behalf.
CVE-2026-9193 is a critical improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server. It affects versions 11.0.0 and 12.0.0, allowing an authenticated user with a low-privileged Hadoop role to escalate privileges and perform privileged operations on the Security database. The vulnerability has a CVSS score of 9.9, indicating a severe impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor.
CVE-2026-9192 is a critical authentication bypass vulnerability in the ODBC App Server component of Progress Software Corporation's MarkLogic Server. It affects versions 11.0.0 and 12.0.0. This flaw allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user, including administrators.
CVE-2026-9190 is an HTTP request smuggling vulnerability in the HTTP App Server component of Progress MarkLogic Server versions 11.0.0 and 12.0.0. This flaw allows a remote attacker to bypass authentication and authorization controls, hijack user sessions, or capture credentials by exploiting inconsistent interpretation of HTTP request boundaries between a reverse proxy and the server when both Content-Length and Transfer-Encoding headers are present in a crafted request.
CVE-2026-8709 is a critical improper privilege management vulnerability in Progress Software Corporation's MarkLogic Server. It affects the REST API document patch operation in versions 11.0.0 and 12.0.0, allowing an authenticated user with a low-privileged REST role to escalate privileges and perform privileged operations on the Security database. The vulnerability has a CVSS score of 9.9, indicating a severe impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor.
CVE-2026-7557 is a critical vulnerability in Progress Software Corporation's MarkLogic Server affecting versions 11.0.0 and 12.0.0. It involves improper verification of cryptographic signatures in the SAML authentication module, allowing unauthenticated remote attackers to bypass authentication and impersonate any user, including administrators. This vulnerability only affects deployments with SAML single sign-on enabled.
CVE-2026-7329 is a critical improper privilege management vulnerability in Progress Software Corporation's MarkLogic Server. It affects the SQL, SPARQL, and Optic REST query interfaces in versions 11.0.0 and 12.0.0. An authenticated user with a low-privileged REST role can escalate privileges to administrator, enabling execution of privileged operations and unauthorized data access.
CVE-2026-7327 is a high-severity vulnerability in Progress Software Corporation's MarkLogic Server affecting versions 11.0.0 and 12.0.0. It involves improper privilege management in the REST API document processing pipeline, allowing an authenticated user with an administrative REST role to escalate privileges. This escalation can lead to unauthorized disclosure of sensitive server-side data accessible by higher-privileged users.
CVE-2026-7326 is a cross-site request forgery (CSRF) vulnerability in the Admin UI of Progress MarkLogic Server versions before 11.3.6 and 12.0.3. It allows a remote attacker to trick an authenticated administrator into performing unintended administrative actions by visiting a malicious web page. This can lead to unauthorized changes in security configurations. The vulnerability has a high severity with a CVSS score of 7.5.
The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform. It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applications. OECH1 encodings should be considered exploitable and immediately replaced by any other supported prefix encoding, all of which are based on symmetric encryption.
A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server
through the adopted authority of the AdminServer process itself. The delegated authority of the AdminServer could allow its users the ability to read arbitrary files on the host system through the misuse of the setFile() and openFile()
methods exposed through the RMI interface. Misuse was limited only by OS-level authority of the AdminServer's elevated
privileges granted and the user's access to these methods enabled through RMI. The exploitable methods have been removed thus eliminating their access through RMI or downstream of the RMI registry.
It was possible to perform Remote Command Execution (RCE) via Java
RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and
execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration
property with inadequate input validation leading to OS command injection.
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The
WhatsUp.ExportUtilities.Export.GetFileWithoutZip
allows execution of commands with iisapppool\nmconsole privileges.
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remote threat actor through an insecure deserialization vulnerability.
In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.
This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to a server directory path on the system running PASOE. If the upload contains a payload that can further exploit the server or its network, the launch of a larger scale attack may be possible.
