THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-9203 (HIGH 8.5) — A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protections for cloud instance metadata endpoints. Successful exploitation can disclose cloud credentials and comprom

[NVD] CVE-2026-9203 (HIGH 8.5) — A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protections for cloud instance metadata endpoints. Successful exploitation can disclose cloud credentials and comprom

mednvdPublished 2026-08-05

CVE-2026-9203 CVSS: 8.5 HIGH Published: 2026-08-05T16:17:10.437

A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protections for cloud instance metadata endpoints. Successful exploitation can disclose cloud credentials and compromise cloud resources accessible to the host instance.

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-9203cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-9203