VulnHub

Real-time Cybersecurity News

Critical

Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

The Hacker News
Critical

Overview

Progress Software disclosed two serious vulnerabilities in its MarkLogic Server database that could allow users with limited management privileges to gain full administrator access. This issue is part of a larger set of 31 flaws announced on October 12, with five classified as critical. The vulnerabilities affect versions 11.3.7 and 12.1.0 of MarkLogic, and fixes have been available since September 10. Organizations using these versions should prioritize applying the updates to prevent unauthorized access and potential data breaches. Failure to address these vulnerabilities could leave systems open to exploitation by malicious actors.

Key Takeaways

  • Affected Systems: MarkLogic Server versions 11.3.7 and 12.1.0
  • Action Required: Apply patches available since September 10 for MarkLogic versions 11.
  • Timeline: Disclosed on October 12, 2023

Original Article Summary

Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0. Affected

Impact

MarkLogic Server versions 11.3.7 and 12.1.0

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Disclosed on October 12, 2023

Remediation

Apply patches available since September 10 for MarkLogic versions 11.3.7 and 12.1.0

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Critical.

Read Original Article

Related Coverage

TFG London cyberattack disrupts systems at Hobbs and Whistles retailers

BleepingComputer

TFG London has reported a cybersecurity incident affecting its IT systems, particularly those used by its premium fashion brands, including Phase Eight, Hobbs, and Whistles. As a result of this attack, operations at these retailers have been disrupted. The exact nature of the incident hasn't been detailed, but the impact on the brands could lead to significant operational challenges, affecting their ability to serve customers effectively. This incident raises concerns about the security measures in place at fashion retailers and the potential risks they face from cyber threats. It's crucial for companies in this sector to assess their cybersecurity protocols to prevent future incidents.

Oct 13, 2026

Ivanti warns of Connect Secure zero-day exploited in attacks

BleepingComputer

Ivanti has issued a warning regarding a zero-day vulnerability in its Connect Secure (ICS) remote access gateway that is currently being exploited by attackers. This flaw allows unauthorized access to sensitive systems, putting organizations at risk. Ivanti is urging customers to implement patches immediately to protect their systems from potential intrusions. The vulnerability affects users of the Ivanti Connect Secure product, which is widely used for secure remote access. Given the nature of the vulnerability and its active exploitation, it’s crucial for affected organizations to act swiftly to mitigate any potential damage and secure their networks.

Oct 13, 2026

Docker Hub flaw let attackers impersonate users, tamper with images

BleepingComputer

Docker has revealed a serious vulnerability in Docker Hub, identified as CVE-2026-105445. This flaw allowed attackers to impersonate other users by exploiting a personal access token (PAT), which could lead to unauthorized access to container repositories. As a result, attackers could potentially tamper with images stored in these repositories, posing significant risks to users who rely on Docker Hub for their container management. The incident underscores the need for all Docker Hub users to review their security practices, especially regarding the management of access tokens. Docker has urged users to take steps to secure their accounts and monitor their repositories for any unauthorized changes.

Oct 13, 2026

SAP warns of maximum severity OAuth2 SSRF security flaw

BleepingComputer

SAP has issued a warning regarding a severe vulnerability affecting its Cloud SDK for Python, part of a larger security update addressing 20 flaws across various products. This particular vulnerability is classified as maximum severity, indicating that it poses a significant risk to users and their systems. Companies using the affected SDK should act quickly to mitigate potential threats. The update comes as part of SAP's October 2026 security measures, highlighting the ongoing need for vigilance in software security. Users are encouraged to apply the necessary patches to protect their systems from potential exploitation.

Oct 13, 2026

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

The Hacker News

Researchers have identified three vulnerabilities in LG's webOS that can be exploited to give attackers root access to certain LG smart TVs without needing a PIN or any interaction from the owner. This means that anyone on the same local network could potentially take control of these TVs. The affected models include the 32LQ636BPSA and the 27TQ600SW, both running webOS version 7.5.7-25. LG has acknowledged the issue and released a fix to address these vulnerabilities, which was detailed in an advisory published on October 12. This incident raises concerns about the security of smart devices in general, as vulnerabilities like this could allow unauthorized access to personal data and control over the device itself.

Oct 13, 2026

Cyberattack Prompts Ahold Delhaize to Disconnect Systems

SecurityWeek

Ahold Delhaize, the parent company of several grocery brands, has taken some of its systems offline following a cyberattack that posed a security threat to its network. The company acted swiftly to contain the issue, though specific details about the nature of the attack or the systems affected have not been disclosed. This incident raises concerns about the security of retail networks, especially as cyberattacks become more common in the industry. Customers and employees may face disruptions as the company works to restore its systems and ensure the security of its operations. The situation serves as a reminder for businesses to remain vigilant in protecting their networks against potential cyber threats.

Oct 13, 2026