CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-9203

A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protections for cloud instance metadata endpoints. Successful exploitation can disclose cloud credentials and compromise cloud resources accessible to the host instance.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 13.0%

CVSS Severity

CVSS v3 Score 8.5

References

https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026

Products affected by CVE-2026-9203

Progress » Marklogic Server » Version: 10.0-1

cpe:2.3:a:progress:marklogic_server:10.0-1
Progress » Marklogic Server » Version: 10.0-10

cpe:2.3:a:progress:marklogic_server:10.0-10
Progress » Marklogic Server » Version: 10.0-10.1

cpe:2.3:a:progress:marklogic_server:10.0-10.1
Progress » Marklogic Server » Version: 10.0-10.2

cpe:2.3:a:progress:marklogic_server:10.0-10.2
Progress » Marklogic Server » Version: 10.0-11

cpe:2.3:a:progress:marklogic_server:10.0-11
Progress » Marklogic Server » Version: 10.0-11.1

cpe:2.3:a:progress:marklogic_server:10.0-11.1
Progress » Marklogic Server » Version: 10.0-2

cpe:2.3:a:progress:marklogic_server:10.0-2
Progress » Marklogic Server » Version: 10.0-2.1

cpe:2.3:a:progress:marklogic_server:10.0-2.1
Progress » Marklogic Server » Version: 10.0-3

cpe:2.3:a:progress:marklogic_server:10.0-3
Progress » Marklogic Server » Version: 10.0-4

cpe:2.3:a:progress:marklogic_server:10.0-4
Progress » Marklogic Server » Version: 10.0-4.2

cpe:2.3:a:progress:marklogic_server:10.0-4.2
Progress » Marklogic Server » Version: 10.0-4.4

cpe:2.3:a:progress:marklogic_server:10.0-4.4
Progress » Marklogic Server » Version: 10.0-5

cpe:2.3:a:progress:marklogic_server:10.0-5
Progress » Marklogic Server » Version: 10.0-5.1

cpe:2.3:a:progress:marklogic_server:10.0-5.1
Progress » Marklogic Server » Version: 10.0-5.2

cpe:2.3:a:progress:marklogic_server:10.0-5.2
Progress » Marklogic Server » Version: 10.0-6

cpe:2.3:a:progress:marklogic_server:10.0-6
Progress » Marklogic Server » Version: 10.0-6.1

cpe:2.3:a:progress:marklogic_server:10.0-6.1
Progress » Marklogic Server » Version: 10.0-6.2

cpe:2.3:a:progress:marklogic_server:10.0-6.2
Progress » Marklogic Server » Version: 10.0-6.3

cpe:2.3:a:progress:marklogic_server:10.0-6.3
Progress » Marklogic Server » Version: 10.0-6.4

cpe:2.3:a:progress:marklogic_server:10.0-6.4
Progress » Marklogic Server » Version: 10.0-6.6

cpe:2.3:a:progress:marklogic_server:10.0-6.6
Progress » Marklogic Server » Version: 10.0-7

cpe:2.3:a:progress:marklogic_server:10.0-7
Progress » Marklogic Server » Version: 10.0-7.1

cpe:2.3:a:progress:marklogic_server:10.0-7.1
Progress » Marklogic Server » Version: 10.0-7.3

cpe:2.3:a:progress:marklogic_server:10.0-7.3
Progress » Marklogic Server » Version: 10.0-7.4

cpe:2.3:a:progress:marklogic_server:10.0-7.4
Progress » Marklogic Server » Version: 10.0-8

cpe:2.3:a:progress:marklogic_server:10.0-8
Progress » Marklogic Server » Version: 10.0-8.1

cpe:2.3:a:progress:marklogic_server:10.0-8.1
Progress » Marklogic Server » Version: 10.0-8.2

cpe:2.3:a:progress:marklogic_server:10.0-8.2
Progress » Marklogic Server » Version: 10.0-8.3

cpe:2.3:a:progress:marklogic_server:10.0-8.3
Progress » Marklogic Server » Version: 10.0-8.5

cpe:2.3:a:progress:marklogic_server:10.0-8.5
Progress » Marklogic Server » Version: 10.0-9

cpe:2.3:a:progress:marklogic_server:10.0-9
Progress » Marklogic Server » Version: 10.0-9.1

cpe:2.3:a:progress:marklogic_server:10.0-9.1
Progress » Marklogic Server » Version: 10.0-9.2

cpe:2.3:a:progress:marklogic_server:10.0-9.2
Progress » Marklogic Server » Version: 10.0-9.4

cpe:2.3:a:progress:marklogic_server:10.0-9.4
Progress » Marklogic Server » Version: 10.0-9.5

cpe:2.3:a:progress:marklogic_server:10.0-9.5
Progress » Marklogic Server » Version: 10.0-9.7

cpe:2.3:a:progress:marklogic_server:10.0-9.7
Progress » Marklogic Server » Version: 11.0.0

cpe:2.3:a:progress:marklogic_server:11.0.0
Progress » Marklogic Server » Version: 11.0.2

cpe:2.3:a:progress:marklogic_server:11.0.2
Progress » Marklogic Server » Version: 11.0.3

cpe:2.3:a:progress:marklogic_server:11.0.3
Progress » Marklogic Server » Version: 11.1.0

cpe:2.3:a:progress:marklogic_server:11.1.0
Progress » Marklogic Server » Version: 11.2.0

cpe:2.3:a:progress:marklogic_server:11.2.0
Progress » Marklogic Server » Version: 11.3.0

cpe:2.3:a:progress:marklogic_server:11.3.0
Progress » Marklogic Server » Version: 11.3.1

cpe:2.3:a:progress:marklogic_server:11.3.1
Progress » Marklogic Server » Version: 11.3.2

cpe:2.3:a:progress:marklogic_server:11.3.2
Progress » Marklogic Server » Version: 11.3.3

cpe:2.3:a:progress:marklogic_server:11.3.3
Progress » Marklogic Server » Version: 11.3.4

cpe:2.3:a:progress:marklogic_server:11.3.4
Progress » Marklogic Server » Version: 11.3.5

cpe:2.3:a:progress:marklogic_server:11.3.5
Progress » Marklogic Server » Version: 12.0.0

cpe:2.3:a:progress:marklogic_server:12.0.0
Progress » Marklogic Server » Version: 12.0.1

cpe:2.3:a:progress:marklogic_server:12.0.1
Progress » Marklogic Server » Version: 12.0.2

cpe:2.3:a:progress:marklogic_server:12.0.2
Progress » Marklogic Server » Version: 9.0-10

cpe:2.3:a:progress:marklogic_server:9.0-10
Progress » Marklogic Server » Version: 9.0-11

cpe:2.3:a:progress:marklogic_server:9.0-11
Progress » Marklogic Server » Version: 9.0-12

cpe:2.3:a:progress:marklogic_server:9.0-12
Progress » Marklogic Server » Version: 9.0-13

cpe:2.3:a:progress:marklogic_server:9.0-13
Progress » Marklogic Server » Version: 9.0-2

cpe:2.3:a:progress:marklogic_server:9.0-2
Progress » Marklogic Server » Version: 9.0-3

cpe:2.3:a:progress:marklogic_server:9.0-3
Progress » Marklogic Server » Version: 9.0-4

cpe:2.3:a:progress:marklogic_server:9.0-4
Progress » Marklogic Server » Version: 9.0-5

cpe:2.3:a:progress:marklogic_server:9.0-5
Progress » Marklogic Server » Version: 9.0-6

cpe:2.3:a:progress:marklogic_server:9.0-6
Progress » Marklogic Server » Version: 9.0-7

cpe:2.3:a:progress:marklogic_server:9.0-7
Progress » Marklogic Server » Version: 9.0-8

cpe:2.3:a:progress:marklogic_server:9.0-8
Progress » Marklogic Server » Version: 9.0-9

cpe:2.3:a:progress:marklogic_server:9.0-9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-9203

Products

Pricing

Contact Us