This vulnerability (CVE-2026-7326) involves a CSRF flaw in the Admin UI of MarkLogic Server versions 11.0.0 and 12.0.0. It allows a remote attacker to perform administrative actions by exploiting the trust of an authenticated administrator who visits a crafted malicious web page. The attack can lead to unauthorized changes in security configurations. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation can result in unauthorized administrative actions on the MarkLogic Server, including changes to security configurations. This could compromise the confidentiality, integrity, and availability of the server and its data. The vulnerability requires the target to be an authenticated administrator who interacts with a malicious web page.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should avoid visiting untrusted web pages while authenticated to the MarkLogic Server Admin UI and consider additional protective measures such as CSRF protections or network-level controls if feasible.