CVE-2026-85957 Improper XML external entity restriction in Progress MarkLogic Server SAML processing
Attackers can exploit improper XML external entity handling in SAML processing to access internal networks or disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-85957?
CVE-2026-85957 is a high-severity vulnerability in Progress Software Corporation MarkLogic Server, published on 12 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintended network access or information disclosure.
Weakness: CWE-611
Which versions are affected by CVE-2026-85957?
How do I fix CVE-2026-85957?
No fix has been published for CVE-2026-85957 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-85957 being exploited?
There is no known exploitation of CVE-2026-85957 in the wild and no public exploit code.
Sources
Also known as GHSA-xppm-xgg9-r2gq.