CVE-2026-85958

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access...

CVE-2026-85958

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are affected by an improper OAuth token validation weakness (CWE-287). This authentication flaw could allow an attacker to submit a token that the server should not accept, potentially leading to unauthorized access . No...