CVE-2026-85973 — Cleartext transmission in Progress MarkLogic Server cluster join operations

CVE-2026-85973

Cleartext transmission in Progress MarkLogic Server cluster join operations PUBLISHED

Description (CNA)

Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could intercept or modify information transmitted through an affected connection.

Affected (CNA)

Vendor / product	Versions
Progress Software Corporation / MarkLogic Server	affected 12.0.0 before 12.1.0

CWE

CWE-319

References

https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-October-2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.