What is GHSA-j86w-xf2g-5g65?

GHSA-j86w-xf2g-5g65 is a security advisory published by GitHub Security Advisories with Critical severity. An improper verification of cryptographic signature vulnerability in the SAML authentication...

Which CVE IDs does GHSA-j86w-xf2g-5g65 cover?

GHSA-j86w-xf2g-5g65 covers the following CVE IDs: CVE-2026-7557. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j86w-xf2g-5g65?

GHSA-j86w-xf2g-5g65 has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

GHSA-j86w-xf2g-5g65CriticalCVSS 9.1

An improper verification of cryptographic signature vulnerability in the SAML authentication...

Vendor

GitHub Security Advisories

Published

August 5, 2026

Last Modified

August 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-7557 →

📋 Description

An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass authentication and impersonate any user, including administrators. This vulnerability affects deployments with SAML single sign-on enabled.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-7557
https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026
https://github.com/advisories/GHSA-j86w-xf2g-5g65