CVE-2026-85976: HTTP response splitting in Progress MarkLogic Server Query Console
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-side response handling.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 12.1.0 - Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 11.3.7
Event History
Frequently Asked Questions
Which deployments are affected?
Progress MarkLogic Server Query Console is affected in 12.x releases before 12.1.0 and 11.x releases before 11.3.7.
What does an attacker need to exploit this issue?
The vulnerability is network-accessible, has low attack complexity, requires low privileges, and requires user interaction. Exploitation involves input used by the Query Console file-exploration endpoint.
What is the impact of successful exploitation?
Successful exploitation could enable HTTP response splitting and unintended client-side response handling. The listed impacts include low confidentiality and integrity impact, with no availability impact.
What should be prioritized for remediation?
Upgrade affected 12.x deployments to 12.1.0 or later and affected 11.x deployments to 11.3.7 or later.