CVE-2026-85948 [CRITICAL] – Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 cont

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote attacker with manage-user-level privileges could exploit this flaw to obtain persistent unauthorized administrative control.