CVE-2026-85961 Progress Software Corporation CVE debrief

Who should care

Defenders and security teams responsible for Progress MarkLogic Server Azure deployments, especially those with access to diagnostic logs, should assess exposure and prioritize securing sensitive information.

Why it matters

CVE-2026-85961 exposes sensitive authentication information in Progress MarkLogic Server Azure deployments' diagnostic logs, potentially leading to unauthorized access. Defenders should verify log security, apply patches, and monitor for suspicious activity.

• Potential unauthorized access to protected cloud resources through sensitive information exposure.
• Need to verify and secure access to diagnostic logs in Progress MarkLogic Server Azure deployments.
• Possible lateral movement within cloud environments if logs are accessed by unauthorized parties.
• Requirement to review and update incident response plans to address potential breaches.

Technical summary

Progress MarkLogic Server 11.x releases before 11.3.7 and 12.x releases before 12.1.0 may record security-sensitive authentication information in diagnostic logs under certain configurations in Azure deployments. This vulnerability can be exploited by an attacker with access to the affected logs, potentially leading to unauthorized access to protected cloud resources. The exposure is specific to Azure deployments and involves sensitive authentication information being recorded in diagnostic logs. Defenders should prioritize verifying and securing access to diagnostic logs, especially in Azure deployments of Progress MarkLogic Server 11.x and 12.x releases before the fixed versions.

Defensive priority

Defenders should prioritize verifying and securing access to diagnostic logs, especially in Azure deployments of Progress MarkLogic Server 11.x and 12.x releases before the fixed versions.

Recommended defensive actions

• Verify and secure access to diagnostic logs in Progress MarkLogic Server Azure deployments.
• Check for and apply vendor-provided patches for Progress MarkLogic Server 11.x and 12.x releases.
• Monitor and restrict access to sensitive information in logs.
• Review and update incident response plans to address potential unauthorized access.
• Perform a thorough review of cloud environments for potential exposure.
• Inventory and track Progress MarkLogic Server Azure deployments for vulnerability assessment.
• Implement compensating controls for exposed systems while remediation is scheduled and verified.

Evidence notes

The CVE record and source item provide details on the sensitive information exposure in Progress MarkLogic Server Azure deployments. The vendor, Progress Software Corporation, has provided a critical security alert bulletin.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.