AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-7329

CRITICAL · CVSS 9.9 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-08-05 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server allows authenticated users with low-privileged roles to escalate their privileges to that of an administrator. This critical flaw can lead to unauthorized execution of privileged operations and data access, posing significant risks to data integrity and confidentiality. Organizations using affected versions should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-7329
Severity
CRITICAL
CVSS
9.9
EPSS
0.32%

Original NVD Description

An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of privileged operations and unauthorized data access.