CVE-2026-85962: Improper authentication in Progress MarkLogic Server SAML processing
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments that use SAML authentication, an unauthenticated remote attacker could cause the affected server to accept an assertion that should be rejected, potentially resulting in unauthorized access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 12.1.0 - Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 11.3.7
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using SAML authentication are exposed if they run a MarkLogic Server 12.x release before 12.1.0 or an 11.x release before 11.3.7. The provided information does not establish exposure for deployments that do not use SAML authentication.
What does an attacker need to exploit this issue?
An attacker can attempt exploitation remotely without authentication or user interaction. The issue could allow the server to accept a SAML assertion that should have been rejected, leading to unauthorized access.
Which versions address the issue?
MarkLogic Server 12.1.0 and later 12.x releases, and 11.3.7 and later 11.x releases, are not included in the affected version ranges.