CVE-2026-85947 [CRITICAL] – Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 cont

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations. A remote attacker with forest-management privileges could exploit this flaw to create a persistent unauthorized administrator account, potentially resulting in complete unauthorized administrative control of the server.