THREAT OPS › Threat News › [NVD] CVE-2026-8709 (CRITICAL 9.9) — An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges and execute privileged operations against the Security
[NVD] CVE-2026-8709 (CRITICAL 9.9) — An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges and execute privileged operations against the Security
CVE-2026-8709 CVSS: 9.9 CRITICAL Published: 2026-08-05T16:17:09.820
An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges and execute privileged operations against the Security database.
Indicators of compromise
- CVE-2026-8709cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-8709