CVE-2026-9192

criticalCVSS 9.8covered by 1 sourcefirst seen 2026-08-05

An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators.

⚡ Watch CVE-2026-9192

Get an email if CVE-2026-9192 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

criticalCVE-2026-9192: An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server befo…nvd · 2026-08-05

External references

NVD record for CVE-2026-9192

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-9192 status](https://www.csirts.com/badge/CVE-2026-9192)](https://www.csirts.com/cve/CVE-2026-9192)