CVE-2026-7557 in MarkLogic Serverthông tin

Tóm tắt

Bởi MITRE • 05/08/2026

An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass authentication and impersonate any user, including administrators. This vulnerability affects deployments with SAML single sign-on enabled.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

chịu trách nhiệm

ProgressSoftware

Đặt trước

30/04/2026

Tiết lộ

05/08/2026

Kiểm duyệt

được chấp nhận

EPSS

0.00000

KEV

không

Các hoạt động

rất thấp

Nguồn

Interested in the pricing of exploits?

See the underground prices here!