PULSEUnderground Intel

LIVE61signals / 24h

FEED

ransomincransom reclama a vprj.org · US · Not Foundransompanzer reclama a Surakarta University · ID · Educationransompanzer reclama a Festina Group · CH · Retail & E-Commerceransomclop reclama a nuv******* · Not Foundransomclop reclama a ipm******* · Not Foundransomclop reclama a ecc******* · Not Foundransomclop reclama a st******* · Not Foundransomclop reclama a qc******* · Not Foundransomclop reclama a flu******* · Not Foundransomclop reclama a mid******* · Not Foundransomclop reclama a itk******* · Not Foundransomclop reclama a G3A******* · Not Foundransomclop reclama a arc******* · Technologyransomclop reclama a omn******* · Not Foundransomincransom reclama a vprj.org · US · Not Foundransompanzer reclama a Surakarta University · ID · Educationransompanzer reclama a Festina Group · CH · Retail & E-Commerceransomclop reclama a nuv******* · Not Foundransomclop reclama a ipm******* · Not Foundransomclop reclama a ecc******* · Not Foundransomclop reclama a st******* · Not Foundransomclop reclama a qc******* · Not Foundransomclop reclama a flu******* · Not Foundransomclop reclama a mid******* · Not Foundransomclop reclama a itk******* · Not Foundransomclop reclama a G3A******* · Not Foundransomclop reclama a arc******* · Technologyransomclop reclama a omn******* · Not Found

CVE Watch355,928 in full archive

Vulnerabilities exploitable today

355,928in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,660

New KEV · 24H0

Exploit Today ≥ 701,604

Distribution · last window

Critical
2,771
High
11,108
Medium
7,335
Low
702

Filters

Window

Severity

Flags

Vulnerabilities355,921–355,928 · 355,928

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-91939.9 CRI

———An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database.13h CVE-2026-91929.8 CRI

———An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators.13h CVE-2026-73278.1 HIG

———An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with an administrative REST role to escalate privileges. This can result in unauthorized disclosure of sensitive server-side data when it is accessed by a higher-privileged user.13h CVE-2026-91909.1 CRI

———An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass authentication and authorization checks, hijack a legitimate user's session, or capture credentials. The vulnerability occurs when a crafted HTTP request containing both Content-Length and Transfer-Encoding headers causes a reverse proxy and MarkLogic Server to interpret request boundaries differently.13h CVE-2026-87099.9 CRI

———An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges and execute privileged operations against the Security database.13h CVE-2026-73299.9 CRI

———An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role to escalate privileges to administrator. This enables execution of privileged operations and unauthorized data access.13h CVE-2026-84008.1 HIG

———IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.3h CVE-2026-75579.1 CRI

———An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass authentication and impersonate any user, including administrators. This vulnerability affects deployments with SAML single sign-on enabled.13h