{"metadata": {"vulnerability": "CVE-2026-85955", "count": 16, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-04T18:42:47.236Z", "date_only": false, "value": "2026-09-04T18:42:47.236Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85955", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T15:59:28.496Z", "date_only": false, "value": "2026-10-12T15:59:28.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85955", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T15:59:28.496Z", "date_only": false, "value": "2026-10-12T15:59:28.496Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "CVE-2026-85955", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T16:05:27.245Z", "date_only": false, "value": "2026-10-12T16:05:27.245024Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117428789362002732", "record": "CVE-2026-85955", "field": "creation_timestamp", "uuid": "2caae63f-7493-4728-b528-6a6e22865c02", "content": "CVE-2026-85955 Improper privilege management in Progress MarkLogic Server xdmp:eval-in Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could result in server-side code execution with elevated permissions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85955https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-October-2026#progress #ProgressSoftwareCorporation #MarkLogicServer#CVE_2026_85955#bot", "url": "https://infosec.exchange/users/cve/statuses/117428789362002732"}, {"timestamp": "2026-10-12T16:17:07Z", "date_only": false, "value": "2026-10-12T16:17:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M226-3JXQ-59VC", "record": "GHSA-M226-3JXQ-59VC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T16:17:07.070Z", "date_only": false, "value": "2026-10-12T16:17:07.070", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85955", "record": "FKIE_CVE-2026-85955", "field": "published"}, {"timestamp": "2026-10-12T16:50:40.276Z", "date_only": false, "value": "2026-10-12T16:50:40.276670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxoxzqv4ep2y", "record": "CVE-2026-85955", "field": "creation_timestamp", "uuid": "57e92b4e-e763-4dbc-9613-5782ffb9c7b5", "content": "\ud83d\udd34 CVE-2026-85955 - Critical (9.9)\n\nProgress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a rem...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85955/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxoxzqv4ep2y"}, {"timestamp": "2026-10-12T18:08:09.474Z", "date_only": false, "value": "2026-10-12T18:08:09.474000Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxp4edbfmo2x", "record": "CVE-2026-85955", "field": "creation_timestamp", "uuid": "ea721d3e-e186-45bb-a179-4be64e0c6715", "content": "\ud83d\udea8 CVE-2026-85955 \u2014 CVSS 9.9 CRITICAL\n\nProgress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attack...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85955\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxp4edbfmo2x"}, {"timestamp": "2026-10-12T18:31:36Z", "date_only": false, "value": "2026-10-12T18:31:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M226-3JXQ-59VC", "record": "GHSA-M226-3JXQ-59VC", "field": "published"}, {"timestamp": "2026-10-12T18:31:36Z", "date_only": false, "value": "2026-10-12T18:31:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M226-3JXQ-59VC", "record": "GHSA-M226-3JXQ-59VC", "field": "modified"}, {"timestamp": "2026-10-12T19:10:04.545Z", "date_only": false, "value": "2026-10-12T19:10:04.545251Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxp7t23gok27", "record": "CVE-2026-85955", "field": "creation_timestamp", "uuid": "f733449f-71c8-4647-9fad-d498cd9589b7", "content": "CVE-2026-85955 - marklogic server\nVersions of MarkLogic Server 12 before 12.1.0 and 11 before 11.3.7 let anyone who can send queries run certain commands without the extra permission\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#marklogicserver #progresscorporation #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxp7t23gok27"}, {"timestamp": "2026-10-14T03:59:29.461Z", "date_only": false, "value": "2026-10-14T03:59:29.461356Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85955", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T03:59:29.461Z", "date_only": false, "value": "2026-10-14T03:59:29.461356Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85955", "record": "FKIE_CVE-2026-85955", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T10:51:06.699Z", "date_only": false, "value": "2026-10-14T10:51:06.699Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85955", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T10:51:06.699Z", "date_only": false, "value": "2026-10-14T10:51:06.699Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-85955", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T11:17:05.990Z", "date_only": false, "value": "2026-10-14T11:17:05.990", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85955", "record": "FKIE_CVE-2026-85955", "field": "lastModified"}]}