HIGH
CVE-2026-7326
CVSS
8.8
Description
A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can result in unauthorized changes to security configuration.
Weakness (CWE)
CWE-352
Cross-Site Request Forgery (CSRF)
EPSS Score
0.15%
Probability of exploitation in next 30 days
4.4th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.