CVE-2026-85959: CWE-778: Insufficient Logging in Progress Software Corporation MarkLogic Server

CVE-2026-85959 describes a vulnerability in Progress Software Corporation's MarkLogic Server affecting versions 11.x prior to 11.3.7 and 12.x prior to 12.1.0. The issue is insufficient logging of successful authentication events in audit logs. This inconsistency in logging may limit the ability of customers to detect or investigate unauthorized access or misuse of credentials. The CVSS 3.1 base score is 7.5, indicating a high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

The vulnerability impacts the integrity of audit logs by not consistently recording successful authentication events. This reduces the effectiveness of audit trails for security monitoring and forensic investigations, potentially allowing unauthorized access or credential misuse to go undetected.

The vendor has released fixed versions 11.3.7 and 12.1.0 that address this logging deficiency. Users should upgrade to MarkLogic Server version 11.3.7 or later in the 11.x series, or 12.1.0 or later in the 12.x series to remediate this issue. Patch status is confirmed by the affected version ranges indicating fixed versions. No additional mitigations are specified.