CVE-2026-85971 — Incorrect log file permissions in Progress MarkLogic Server
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could all…
Published: 2026-10-12 · CVSS: 7.1 · CVSS 3.1
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs; existing logs retain their current permissions until remediated.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7