THREAT OPS › Threat News › [NVD] CVE-2026-7326 (HIGH 7.5) — A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can res
[NVD] CVE-2026-7326 (HIGH 7.5) — A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can res
CVE-2026-7326 CVSS: 7.5 HIGH Published: 2026-08-05T16:17:08.930
A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can result in unauthorized changes to security configuration.
Indicators of compromise
- CVE-2026-7326cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-7326