Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a malicious web page to perform administrative actions on the administrator's behalf. This can result in unauthorized changes to security configuration.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚠️ Vulnerabilidad en productos Progress ❗ CVE-2026-7326 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-progress-4/ https://t.co/iER0S9bXS4
Post summary
The tweet announces the existence of CVE-2026-7326 in Progress products and points to a link for additional information, but provides no further details such as PoC, exploit code, active use, patch, technical specifics, or false‑positive claims.
CVE-2026-7326 Cross-Site Request Forgery in Progress MarkLogic Server Admin UI Before 1... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7326 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
A brief notice of a CSRF vulnerability (CVE-2026-7326) in Progress MarkLogic Server Admin UI is shared, providing only a general reference and a link to details. No exploit, patch, or active exploitation information is included.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | progress | marklogic_server | - | - | - |