CVE-2026-7329
Critical · CVSS 9.9- CVSS
- 9.9
- nvd
- EPSS
- 0.37%
- 30th pct
- KEV
- No
- Class
- other
- CWE-269
Description
An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of privileged operations and unauthorized data access.
References
Status: profiled · ingested 2026-09-03T18:00:49.000Z