MarkLogic Server CVE-2026-85970

Exploitation requires that an attacker can submit XML to one of the affected MarkLogic Server request paths that parse XML with external entity (XXE) processing enabled by default - a behavior present in default configurations of the vulnerable 11.x (<11.3.7) and 12.x (<12.1.0) releases, so no special non-default setting is needed to reach the parser. The primary limiting factor is authentication: the CVSS vector specifies PR:L, so the attacker must hold at least low-privileged valid credentials or an existing authenticated session on the server; this is not a fully unauthenticated flaw. No user interaction is required (UI:N). Impact is bounded to confidentiality (local file read / SSRF response disclosure) and minor availability effects; it does not permit data modification (I:N). Upgrading to 11.3.7 or 12.1.0, which disable default external entity processing, removes the condition.

This is a moderate, authentication-gated information-disclosure/SSRF flaw rather than a top-tier emergency. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L, base 7.1 High) indicates a network-reachable, low-complexity attack that nonetheless requires at least low-level privileges (PR:L) - i.e. an authenticated session - and yields high confidentiality impact (local file disclosure) with only low availability impact (SSRF-driven request generation) and no integrity impact. No EPSS score, CISA KEV listing, SSVC decision data, or POC was provided in the input, so there is no signal of active or probable exploitation to elevate priority; per the precision rules this is 'no public exploit identified at time of analysis.' A notable signal conflict exists: the sole vendor reference is titled 'Critical Security Alert Bulletin' yet the assigned CVSS is 7.1 (High, not Critical) - verify severity framing with Progress, as the vendor's 'Critical' labeling may reflect bulletin-level urgency rather than this specific CVE's base score. Net: real and worth patching on normal cadence for exposed MarkLogic instances, but the authentication requirement and absence of exploitation evidence argue against treating it as an emergency.

An attacker holding low-privileged credentials (or who has compromised an application account) to a MarkLogic Server sends crafted XML to one of the server paths that parse XML with external entity processing enabled by default. The malicious entity forces the server to read a local file (e.g. configuration or credential material) or issue a server-side request to an internal host, returning that data to the attacker. No public proof-of-concept was identified in the provided data, and exploitation requires an authenticated foothold.