by Kastro
Paper/Archive/CVE-2026-7557

CVE-2026-7557

Progress Software Corporation MarkLogic Server — SAML authentication bypass in Progress MarkLogic Server

EPSS 0.5%CVSS 9.1
critical.is priorityof 100
35
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 40.1.401 × 208.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass authentication and impersonate any user, including administrators. This vulnerability affects deployments with SAML single sign-on enabled.

Affected

ProductAffectedFixed inSource
MarkLogic Server11.0.0 – < 11.3.611.3.6CNA
MarkLogic Server12.0.0 – < 12.0.312.0.3CNA

Scores by source

ProgressSoftware (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorycommunity.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026