Vulnerability Details CVE-2026-9190
An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass authentication and authorization checks, hijack a legitimate user's session, or capture credentials. The vulnerability occurs when a crafted HTTP request containing both Content-Length and Transfer-Encoding headers causes a reverse proxy and MarkLogic Server to interpret request boundaries differently.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 37.5%
CVSS Severity
CVSS v3 Score 9.1
References
Products affected by CVE-2026-9190
-
cpe:2.3:a:progress:marklogic_server:10.0-1
-
cpe:2.3:a:progress:marklogic_server:10.0-10
-
cpe:2.3:a:progress:marklogic_server:10.0-10.1
-
cpe:2.3:a:progress:marklogic_server:10.0-10.2
-
cpe:2.3:a:progress:marklogic_server:10.0-11
-
cpe:2.3:a:progress:marklogic_server:10.0-11.1
-
cpe:2.3:a:progress:marklogic_server:10.0-2
-
cpe:2.3:a:progress:marklogic_server:10.0-2.1
-
cpe:2.3:a:progress:marklogic_server:10.0-3
-
cpe:2.3:a:progress:marklogic_server:10.0-4
-
cpe:2.3:a:progress:marklogic_server:10.0-4.2
-
cpe:2.3:a:progress:marklogic_server:10.0-4.4
-
cpe:2.3:a:progress:marklogic_server:10.0-5
-
cpe:2.3:a:progress:marklogic_server:10.0-5.1
-
cpe:2.3:a:progress:marklogic_server:10.0-5.2
-
cpe:2.3:a:progress:marklogic_server:10.0-6
-
cpe:2.3:a:progress:marklogic_server:10.0-6.1
-
cpe:2.3:a:progress:marklogic_server:10.0-6.2
-
cpe:2.3:a:progress:marklogic_server:10.0-6.3
-
cpe:2.3:a:progress:marklogic_server:10.0-6.4
-
cpe:2.3:a:progress:marklogic_server:10.0-6.6
-
cpe:2.3:a:progress:marklogic_server:10.0-7
-
cpe:2.3:a:progress:marklogic_server:10.0-7.1
-
cpe:2.3:a:progress:marklogic_server:10.0-7.3
-
cpe:2.3:a:progress:marklogic_server:10.0-7.4
-
cpe:2.3:a:progress:marklogic_server:10.0-8
-
cpe:2.3:a:progress:marklogic_server:10.0-8.1
-
cpe:2.3:a:progress:marklogic_server:10.0-8.2
-
cpe:2.3:a:progress:marklogic_server:10.0-8.3
-
cpe:2.3:a:progress:marklogic_server:10.0-8.5
-
cpe:2.3:a:progress:marklogic_server:10.0-9
-
cpe:2.3:a:progress:marklogic_server:10.0-9.1
-
cpe:2.3:a:progress:marklogic_server:10.0-9.2
-
cpe:2.3:a:progress:marklogic_server:10.0-9.4
-
cpe:2.3:a:progress:marklogic_server:10.0-9.5
-
cpe:2.3:a:progress:marklogic_server:10.0-9.7
-
cpe:2.3:a:progress:marklogic_server:11.0.0
-
cpe:2.3:a:progress:marklogic_server:11.0.2
-
cpe:2.3:a:progress:marklogic_server:11.0.3
-
cpe:2.3:a:progress:marklogic_server:11.1.0
-
cpe:2.3:a:progress:marklogic_server:11.2.0
-
cpe:2.3:a:progress:marklogic_server:11.3.0
-
cpe:2.3:a:progress:marklogic_server:11.3.1
-
cpe:2.3:a:progress:marklogic_server:11.3.2
-
cpe:2.3:a:progress:marklogic_server:11.3.3
-
cpe:2.3:a:progress:marklogic_server:11.3.4
-
cpe:2.3:a:progress:marklogic_server:11.3.5
-
cpe:2.3:a:progress:marklogic_server:12.0.0
-
cpe:2.3:a:progress:marklogic_server:12.0.1
-
cpe:2.3:a:progress:marklogic_server:12.0.2
-
cpe:2.3:a:progress:marklogic_server:9.0-10
-
cpe:2.3:a:progress:marklogic_server:9.0-11
-
cpe:2.3:a:progress:marklogic_server:9.0-12
-
cpe:2.3:a:progress:marklogic_server:9.0-13
-
cpe:2.3:a:progress:marklogic_server:9.0-2
-
cpe:2.3:a:progress:marklogic_server:9.0-3
-
cpe:2.3:a:progress:marklogic_server:9.0-4
-
cpe:2.3:a:progress:marklogic_server:9.0-5
-
cpe:2.3:a:progress:marklogic_server:9.0-6
-
cpe:2.3:a:progress:marklogic_server:9.0-7
-
cpe:2.3:a:progress:marklogic_server:9.0-8
-
cpe:2.3:a:progress:marklogic_server:9.0-9