Back to Security News
Security News High Severity Oct 13, 2026 Tenable Newest CVEs

CVE-2026-85969 high vulnerability summary

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality. A remote authenticated attacker could explo...

Severity: High

CVE-2026-85969 is a High severity vulnerability notice that security teams should triage for exposure in their own environments.

What to review

The affected area appears to involve Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in. Administrators should compare this notice against their asset inventory, dependency list, and externally exposed services.

Recommended action

Confirm whether the affected product or library is present, review vendor guidance, prioritize patching based on internet exposure and severity, and monitor logs for suspicious behavior tied to the affected component.

Credits

This brief is based on information from Tenable Newest CVEs . Please refer to the original source for the complete advisory and vendor-specific guidance.

Related Posts

Security News
Medium Severity

CVE-2026-120244 medium vulnerability summary

FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Attackers can craft a PCX image whose RLE data...

Tenable Newest CVEs Read
Security News
Medium Severity

CVE-2026-120245 medium vulnerability summary

FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit paletted Sun Raster images. Attackers can craft a...

Tenable Newest CVEs Read
Security News
Medium Severity

CVE-2026-120246 medium vulnerability summary

FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file who...

Tenable Newest CVEs Read