CVE-2026-85958

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are affected by an improper OAuth token validation weakness (CWE-287). This authentication flaw could allow an attacker to submit a token that the server should not accept, potentially leading to unauthorized access . No...