Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintended network access or information disclosure.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97679
https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-October-2026