Progress Patched Critical MarkLogic Server Vulnerabilities
Security updates mitigate remote code execution and administrator credential theft risks in current software versions.
Updated on Oct. 13, 2026 in Cybersecurity
Live Poll
Do you trust that local businesses in your area are effectively securing your personal data?
Progress has released security updates for its MarkLogic Server to resolve vulnerabilities that could allow unauthorized remote code execution. These flaws also enable attackers to create unauthorized administrator accounts and steal sensitive data from affected installations.
Why it matters
Unpatched server software remains a primary vector for enterprise data breaches, making timely remediation essential for protecting protected data. This update addresses critical entry points that allow attackers to bypass standard access controls.
The security updates address flaws present across all MarkLogic Server iterations from version 12.0 through 12.0.3. These vulnerabilities permit unauthorized remote code execution, a mechanism where an attacker runs arbitrary commands on the server to gain total control.
The players
Progress
A provider of application development and digital experience software that maintains the MarkLogic Server platform.
MarkLogic Server
A multi-model NoSQL database platform designed to manage and query complex data structures for enterprise environments.
The details
The vulnerabilities stem from security flaws that allow external actors to gain elevated system privileges. By exploiting these weaknesses, an attacker can create an administrator account, bypassing identity verification to perform credential theft. Accessing protected data becomes possible once the attacker secures these administrative permissions, effectively turning the server against its own security protocols.
Timeline
October 12, 2026: Security alert published for MarkLogic Server
The Tech Race
This update follows the pattern established by the 2021 Kaseya VSA supply chain attack, where critical flaws in enterprise server software were targeted to gain broad network access. Enterprise database providers currently face a race to secure infrastructure against increasingly automated exploitation of remote execution flaws.
System administrators must prioritize patching to version 12.0.4 or higher to eliminate unauthorized access vectors. Organizations failing to apply these updates remain vulnerable to remote takeover and unauthorized administrative account creation.
The takeaway
Security administrators should audit current server configurations to ensure they are no longer running the vulnerable 12.0.x baseline. Verify the specific version of your deployment and cross-reference the latest vendor release notes to confirm the installation of these critical patches.
Further reading
For broader trends in vulnerability management and defensive engineering, explore Cybersecurity.
Live Poll
Do you trust that local businesses in your area are effectively securing your personal data?
