CVE-2026-85960 | Progress MarkLogic Server up to 11.3.6/12.0.x Query Console cross-site request forgery

October 12, 2026 Yanac

A vulnerability was found in Progress MarkLogic Server up to 11.3.6/12.0.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Query Console. Such manipulation leads to cross-site request forgery.

This vulnerability is traded as CVE-2026-85960. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More