High severity7.5NVD Advisory· Published Oct 12, 2026

CVE-2026-85961

Description

On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected cloud resources.

Affected products

Progress (organisation)/MarkLogic Serverllm-fuzzy
Range: <12.1.0, <11.3.7

Patches

Vulnerability mechanics

References

community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-October-2026nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000