CVE-2026-85951: CWE-918: Server-Side Request Forgery (SSRF) in Progress Software Corporation MarkLogic Server

This vulnerability (CVE-2026-85951) affects Progress MarkLogic Server on Azure in versions 11.x prior to 11.3.7 and 12.x prior to 12.1.0. It is a server-side request forgery (SSRF) flaw (CWE-918) that allows an authenticated attacker to make unauthorized requests to internal cloud services. Exploitation could result in unauthorized access to sensitive cloud credentials or tokens. The CVSS 3.1 base score is 8.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high confidentiality impact with limited integrity impact. The vendor has released patches to fix this vulnerability.

An authenticated attacker exploiting this SSRF vulnerability could access internal cloud services within the Azure environment hosting MarkLogic Server. This may lead to unauthorized disclosure of cloud credentials or tokens, which could compromise cloud resources. The integrity impact is limited, and availability is not affected. No known exploits are reported in the wild at this time.

A patch is available from Progress Software Corporation to remediate this vulnerability. Users should upgrade MarkLogic Server to version 11.3.7 or later for the 11.x branch, or 12.1.0 or later for the 12.x branch. Since this is a cloud-hosted service on Azure, the vendor manages remediation for the cloud environment. Check the vendor advisory for detailed patch instructions and confirmation of mitigation status.