CVE-2026-85961
On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases…
- Risk score
- 68/100
- CVSS
- 7.5 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 12 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to …
- Affected
- See advisory
- Fix
- Upgrade the product to 12.1.0 or 11.3.7 (whichever matches your release line), or later.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 7.5 high
- Remotely exploitable without logging in
- On your watchlist: azure
References
Original description
On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected cloud resources.
Last activity 12 Oct 2026. Patch Forecast updates every hour.