THREAT OPS › Threat News › [NVD] CVE-2026-7329 (CRITICAL 9.9) — An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of
[NVD] CVE-2026-7329 (CRITICAL 9.9) — An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of
CVE-2026-7329 CVSS: 9.9 CRITICAL Published: 2026-08-05T16:17:09.200
An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of privileged operations and unauthorized data access
Indicators of compromise
- CVE-2026-7329cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-7329