CVE-2026-7326 | BDVDB-2026-355284 Detail

Description#

A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can result in unauthorized changes to security configuration.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-05Record published in the CVE List.
2. Version 22026-08-07Most recent update recorded in the CVE List.