Vulnerability Details CVE-2026-7329
An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of privileged operations and unauthorized data access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 30.3%
CVSS Severity
CVSS v3 Score 9.9
Products affected by CVE-2026-7329
-
cpe:2.3:a:progress:marklogic_server:10.0-1
-
cpe:2.3:a:progress:marklogic_server:10.0-10
-
cpe:2.3:a:progress:marklogic_server:10.0-10.1
-
cpe:2.3:a:progress:marklogic_server:10.0-10.2
-
cpe:2.3:a:progress:marklogic_server:10.0-11
-
cpe:2.3:a:progress:marklogic_server:10.0-11.1
-
cpe:2.3:a:progress:marklogic_server:10.0-2
-
cpe:2.3:a:progress:marklogic_server:10.0-2.1
-
cpe:2.3:a:progress:marklogic_server:10.0-3
-
cpe:2.3:a:progress:marklogic_server:10.0-4
-
cpe:2.3:a:progress:marklogic_server:10.0-4.2
-
cpe:2.3:a:progress:marklogic_server:10.0-4.4
-
cpe:2.3:a:progress:marklogic_server:10.0-5
-
cpe:2.3:a:progress:marklogic_server:10.0-5.1
-
cpe:2.3:a:progress:marklogic_server:10.0-5.2
-
cpe:2.3:a:progress:marklogic_server:10.0-6
-
cpe:2.3:a:progress:marklogic_server:10.0-6.1
-
cpe:2.3:a:progress:marklogic_server:10.0-6.2
-
cpe:2.3:a:progress:marklogic_server:10.0-6.3
-
cpe:2.3:a:progress:marklogic_server:10.0-6.4
-
cpe:2.3:a:progress:marklogic_server:10.0-6.6
-
cpe:2.3:a:progress:marklogic_server:10.0-7
-
cpe:2.3:a:progress:marklogic_server:10.0-7.1
-
cpe:2.3:a:progress:marklogic_server:10.0-7.3
-
cpe:2.3:a:progress:marklogic_server:10.0-7.4
-
cpe:2.3:a:progress:marklogic_server:10.0-8
-
cpe:2.3:a:progress:marklogic_server:10.0-8.1
-
cpe:2.3:a:progress:marklogic_server:10.0-8.2
-
cpe:2.3:a:progress:marklogic_server:10.0-8.3
-
cpe:2.3:a:progress:marklogic_server:10.0-8.5
-
cpe:2.3:a:progress:marklogic_server:10.0-9
-
cpe:2.3:a:progress:marklogic_server:10.0-9.1
-
cpe:2.3:a:progress:marklogic_server:10.0-9.2
-
cpe:2.3:a:progress:marklogic_server:10.0-9.4
-
cpe:2.3:a:progress:marklogic_server:10.0-9.5
-
cpe:2.3:a:progress:marklogic_server:10.0-9.7
-
cpe:2.3:a:progress:marklogic_server:11.0.0
-
cpe:2.3:a:progress:marklogic_server:11.0.2
-
cpe:2.3:a:progress:marklogic_server:11.0.3
-
cpe:2.3:a:progress:marklogic_server:11.1.0
-
cpe:2.3:a:progress:marklogic_server:11.2.0
-
cpe:2.3:a:progress:marklogic_server:11.3.0
-
cpe:2.3:a:progress:marklogic_server:11.3.1
-
cpe:2.3:a:progress:marklogic_server:11.3.2
-
cpe:2.3:a:progress:marklogic_server:11.3.3
-
cpe:2.3:a:progress:marklogic_server:11.3.4
-
cpe:2.3:a:progress:marklogic_server:11.3.5
-
cpe:2.3:a:progress:marklogic_server:12.0.0
-
cpe:2.3:a:progress:marklogic_server:12.0.1
-
cpe:2.3:a:progress:marklogic_server:12.0.2
-
cpe:2.3:a:progress:marklogic_server:9.0-10
-
cpe:2.3:a:progress:marklogic_server:9.0-11
-
cpe:2.3:a:progress:marklogic_server:9.0-12
-
cpe:2.3:a:progress:marklogic_server:9.0-13
-
cpe:2.3:a:progress:marklogic_server:9.0-2
-
cpe:2.3:a:progress:marklogic_server:9.0-3
-
cpe:2.3:a:progress:marklogic_server:9.0-4
-
cpe:2.3:a:progress:marklogic_server:9.0-5
-
cpe:2.3:a:progress:marklogic_server:9.0-6
-
cpe:2.3:a:progress:marklogic_server:9.0-7
-
cpe:2.3:a:progress:marklogic_server:9.0-8
-
cpe:2.3:a:progress:marklogic_server:9.0-9