CVE-2026-85975

{
  "etk_id": "ETK-2026-1413",
  "cve_id": "CVE-2026-85975",
  "display_id": "CVE-2026-85975",
  "ghsa_id": "GHSA-26j8-pcp8-mxhw",
  "euvd_id": "EUVD-2026-97572",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Cleartext Amazon S3 transport in MarkLogic Server",
  "summary": "MarkLogic Server 11.x before 11.3.7 and 12.x before 12.1.0 can use unencrypted connections when communicating with Amazon S3. An attacker positioned on the relevant network path may be able to read transmitted data or credentials.",
  "mitigation": "Upgrade MarkLogic Server 11.x to 11.3.7 or later, or 12.x to 12.1.0 or later. Ensure Amazon S3 connections use encrypted transport.",
  "vendor": "Progress Software Corporation",
  "product": "MarkLogic Server",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 11.0.0, < 11.3.7",
        ">= 12.0.0, < 12.1.0"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "11.3.7",
        "12.1.0"
      ],
      "package_name": "MarkLogic Server",
      "purl": null
    }
  ],
  "cwes": [
    319
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss_score": 0.0018,
  "epss_percentile": 0.0698,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 28.64773395,
  "t0_at": "2026-10-12T16:52:30.645000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-12T16:52:30.645000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-12T16:52:30.645000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85975"
    }
  }
}