Is CVE-2026-7326 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-7326?

CVE-2026-7326 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-7326

Description

A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can result in unauthorized changes to security configuration.