CVE-2026-85962: CWE-287: Improper Authentication in Progress Software Corporation MarkLogic Server

CVE-2026-85962 describes an improper authentication vulnerability (CWE-287) in Progress Software Corporation's MarkLogic Server affecting versions 11.x prior to 11.3.7 and 12.x prior to 12.1.0. The issue lies in the SAML authentication processing where an unauthenticated remote attacker can manipulate the server into accepting a SAML assertion that should be rejected. This could lead to unauthorized access to the system. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is primarily on integrity, with no confidentiality or availability impact noted.

An unauthenticated remote attacker can exploit this vulnerability to bypass SAML authentication controls, causing the server to accept invalid assertions. This may result in unauthorized access to the MarkLogic Server, compromising system integrity. There is no indication of confidentiality or availability impact. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch links are provided in the data, users should monitor Progress Software Corporation advisories for updates and apply any official fixes once available. Until then, consider restricting access to SAML authentication endpoints or implementing additional authentication controls as a temporary mitigation.