CVE-2026-85960: CWE-352: Cross-Site Request Forgery (CSRF) in Progress Software Corporation MarkLogic Server
Description
Progress MarkLogic Server versions 11.x before 11.3.7 and 12.x before 12.1.0 contain a Cross-Site Request Forgery (CSRF) vulnerability due to predictable CSRF tokens in the Query Console. This flaw allows a remote attacker to trick an authenticated user into submitting unauthorized requests, potentially executing server-side code with the user's permissions.
CVSS v3.1
Score 7.5high
Affected software
Progress Software Corporation
MarkLogic Server
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-85960 describes a CSRF vulnerability in Progress Software Corporation's MarkLogic Server. Versions 11.x prior to 11.3.7 and 12.x prior to 12.1.0 use predictable CSRF tokens in the Query Console interface. An attacker who can lure an authenticated user to a malicious webpage may exploit this to perform unauthorized actions on the server with the victim's privileges, including executing server-side code.
Potential Impact
Successful exploitation can lead to unauthorized execution of server-side code with the permissions of an authenticated Query Console user. This compromises confidentiality, integrity, and availability of the affected system, as indicated by the CVSS score of 7.5 with high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
A fix is available in MarkLogic Server versions 11.3.7 and 12.1.0 and later. Users should upgrade to these versions to remediate the vulnerability. No vendor advisory content was provided to indicate alternative mitigations or temporary fixes.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- ProgressSoftware
- Date Reserved
- 2026-09-04T18:43:01.396Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acd0c1b2cdf04f656b11c25
Added to database: 10/12/2026, 16:34:35 UTC
Last enriched: 10/12/2026, 16:48:21 UTC
Last updated: 10/12/2026, 16:49:18 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.