CVE-2026-85957

Description

Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintended network access or information disclosure.

Affected Platforms

Weakness Type

CWE-611

References

• https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulle…