THREATOPS
THREAT OPSThreat News › [NVD] CVE-2026-7326 (HIGH 7.5) — A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can res

[NVD] CVE-2026-7326 (HIGH 7.5) — A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can res

mednvdPublished 2026-08-05

CVE-2026-7326 CVSS: 7.5 HIGH Published: 2026-08-05T16:17:08.930

A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can result in unauthorized changes to security configuration.

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-7326