CVE-2026-9192
CriticalCVSS 9.8Summary
An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators.
Risk Assessment
Risk of unauthorized access to data and operations with administrator privileges without credentials, potentially leading to full system compromise.
Recommendation
Immediately upgrade Progress MarkLogic Server to version 11.3.6 or 12.0.3 (or later). Also restrict access to the ODBC server to trusted networks only.
Original NVD description (English source)
An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators.