CVE-2026-85948

Summary

A remote attacker with manage-user privileges can exploit an XQuery injection flaw in Progress MarkLogic Server's deprecated Management API to gain persistent administrative control. This allows attackers to escalate their privileges and maintain long-term access to the system.

Exploitability

Exploitation requires a remote attacker with manage-user-level privileges, making it moderately difficult but not highly complex to achieve.

Blast radius

If exploited, this flaw could allow attackers to gain full administrative control over the MarkLogic database server, potentially compromising all data and enabling persistent unauthorized access.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to MarkLogic Server 12.1.0 or 11.3.7 to remediate this XQuery injection vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.