[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFKVPfoC8zFJE6cj9uZh7BiWX-_1Aqt0VpOT1ulH1zxw":3},{"article":4,"iocs":43,"watch_terms":72,"solutions":73,"lesson":162},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"f38bec44-c727-45ff-898d-01aed648780b","Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control","two-critical-marklogic-flaws-could-give-delegated-managers-persistent-admin-cont-81cc82","Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0. Affected","Progress Software has disclosed two critical vulnerabilities in its MarkLogic Server database that could allow users with limited management privileges to gain persistent administrator control. Five of the 31 disclosed flaws are rated critical, with two of them scoring 9.9 out of 10 on the CVSS scale. Fixes are available in MarkLogic versions 11.3.7 and 12.1.0, with patches released on September 10.","Two critical MarkLogic flaws allow delegated managers to gain persistent admin control.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Ftwo-critical-marklogic-flaws-could-give.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjvGRzVYOU1S12WE6ja5ZSrhInOGaNdwCGGwWch1oJn_SDtoy90ycGVjd-JeDjwSSH8XDzKlkoKsu_vlND1iW0aWJgEqf3Ti18goDI0yXeaLbF2DHrokj8Qdvm1kHEi8wqdm6_axRi17PVBqtlgFWLpZnv6Eufx_bFMkpWcnz6ymbQI4IDB7lgYi3QrZ7w\u002Fs1600\u002Famrk.jpg","2026-10-13T08:44:01+00:00","2026-10-13T10:00:15.314154+00:00",8,[17,20,23,26,28],{"name":18,"type":19},"MarkLogic Server","product",{"name":21,"type":22},"Progress Software","vendor",{"name":24,"type":25},"XQuery","technology",{"name":27,"type":25},"SAML",{"name":29,"type":25},"OAuth","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,38],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[44,48,51,54,57,60,63,66,69],{"type":45,"value":46,"context":47},"cve","CVE-2026-85947","Critical flaw allowing persistent administrator account creation.",{"type":45,"value":49,"context":50},"CVE-2026-85948","Critical flaw allowing persistent administrative control via XQuery injection.",{"type":45,"value":52,"context":53},"CVE-2026-85955","Critical flaw allowing elevated server-side code execution.",{"type":45,"value":55,"context":56},"CVE-2026-85956","Critical flaw allowing backup\u002Frestore of forests outside own database.",{"type":45,"value":58,"context":59},"CVE-2026-9191","Critical flaw allowing unauthorized actions or session compromise.",{"type":45,"value":61,"context":62},"CVE-2026-85954","High severity flaw allowing privilege escalation via XQuery functions.",{"type":45,"value":64,"context":65},"CVE-2026-85962","High severity flaw in SAML authentication allowing assertion acceptance.",{"type":45,"value":67,"context":68},"CVE-2026-85957","High severity flaw in SAML parser processing external DTDs\u002Fentities.",{"type":45,"value":70,"context":71},"CVE-2026-85958","High severity flaw in OAuth allowing acceptance of invalid tokens.",[21,18],{"controls":74,"vendors":161},[75,103,132],{"slug":76,"name":77,"problem":78,"products":79},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[80,88,96],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":76,"product_name":100,"url":101,"description":102},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"slug":104,"name":105,"problem":106,"products":107},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"slug":133,"name":134,"problem":135,"products":136},"patch-management","Automated patch management","Known holes get closed in days, not months.",[137,145,153],{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":154,"vendor_name":155,"vendor_logo":156,"product_slug":157,"product_name":158,"url":159,"description":160},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",[],{"slug":163,"title":164,"body":165,"framework_refs":166,"framework_notes":177},"marklogic-flaws-let-limited-users-seize-persistent-admin-control","MarkLogic Flaws Let Limited Users Seize Persistent Admin Control","Two critical vulnerabilities in Progress Software's MarkLogic Server (CVSS 9.9) allow users with delegated management privileges to escalate their access and gain persistent administrator control — a severe violation of the principle of least privilege. The root issue lies in flawed privilege enforcement within the database platform, meaning trust boundaries between role types were not properly enforced. This matters because database administrators often hold the keys to an organization's most sensitive data, and a compromised delegated account could silently maintain elevated access long after the initial exploit. With patches available since September 10 in versions 11.3.7 and 12.1.0, organizations running older versions remain exposed to complete database takeover.",[167,168,169,170,171,172,173,174,175,176],"CIS Control 4: Controlled Use of Administrative Privileges","CIS Control 7: Continuous Vulnerability Management","CIS Control 18: Application Software Security","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AU-9: Protection of Audit Information","NIST CSF ID.RA-1: Asset vulnerabilities are identified and documented","GDPR Article 32: Security of Processing (where personal data is stored in MarkLogic)","ITIL Change Management: Emergency Change procedures for critical patches",{}]