Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-9192 Authentication Bypass in Progress MarkLogic Server ODBC App Server Before 11.3.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-9192
Post summary
A brief notice identifies CVE-2026-9192, an authentication bypass in MarkLogic Server ODBC App Server prior to 11.3.6, with a link to Vulmon for more details but no further exploitation or mitigation information.
🚨Critical - Progress MarkLogic ODBC App Server Auth Bypass (CVE-2026-9192) Progress MarkLogic Server ODBC App Server contains an auth bypass that lets unauthenticated remote attackers bypass password verification and submit queries as any known username (incl. admin), resulting in full data access and potential system takeover. 👉Affected: Progress MarkLogic Server < 11.3.6, 12.0.0-12.0.2 | Upgrade to 11.3.6 / 12.0.3
Post summary
A new auth bypass vulnerability (CVE‑2026‑9192) permits unauthenticated remote attackers to assume any user’s identity and gain full data access on Progress MarkLogic Server versions before 11.3.6 and 12.0.3, and users are advised to upgrade to the patched releases.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | progress | marklogic_server | - | - | - |