CVE-2026-85961: Sensitive information exposure in Progress MarkLogic Server Azure deployments
On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected cloud resources.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 12.1.0 - Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 11.3.7
Event History
Frequently Asked Questions
Which deployments are affected?
The issue applies to Progress MarkLogic Server deployments on Azure running 12.x before 12.1.0 or 11.x before 11.3.7. It occurs only under certain configurations.
What does an attacker need to exploit this issue?
An attacker needs access to the affected diagnostic logs. The exposed authentication information could then be used to obtain unauthorized access to protected cloud resources.
Are default Azure deployments affected?
The available information says the exposure occurs under certain configurations, but does not identify those configurations or state whether defaults are affected.
How can I determine whether my environment may be exposed?
Verify whether the Azure deployment runs an affected 11.x or 12.x release, then review access to diagnostic logs and inspect whether those logs contain security-sensitive authentication information.