Powered by Zoomin Software. For more details please contactZoomin

MarkLogic Bug Fixes

Issues fixed in MarkLogic Server 11.3.6

  • Last Updated: August 5, 2026
  • 1 minute read
    • MarkLogic Server
    • Documentation

Released: July 1, 2026

The following issues have been addressed in this release:

Bug ID

Description

MLE-30699

When Auto Logout is enabled, Query Console may redirect to a logout URL that returns a "Page Not Found" error instead of completing the logout flow.

MLE-30698

After upgrading to MarkLogic Server 11.3.5, the 8001_ErrorLog.txt file could contain the message "Upgraded security to 12.1.0" even though the Security database was upgraded to the correct 11.3.5 version. The issue was limited to the version number displayed in the log message.

MLE-30697

In MarkLogic Server 11.3.5, custom REST extensions invoked through the REST Client API could run as an internal REST transform user instead of the authenticated calling user. This could cause extensions that rely on the caller's roles, privileges, or permissions to fail or produce unexpected results.

MLE-30692

During upgrade, user-created REST API App Servers on ports other than 8000 could have their URL Rewriter setting reset from a custom REST API rewriter to the default /MarkLogic/rest-api/rewriter.xml. This could cause applications depending on the custom rewriter configuration to stop working as expected.

MLE-31025

When invoking a REST transform with result=ignore, MarkLogic incorrectly threw a type validation error if the transform function returned an invalid type. This behavior contradicts the documented semantics of result=ignore, which specifies that the transform's return value is completely discarded—including any type validation.

CVEs Addressed

  • CVE-2026-7326
  • CVE-2026-7327
  • CVE-2026-7329
  • CVE-2026-7557
  • CVE-2026-8709
  • CVE-2026-9190
  • CVE-2026-9192
  • CVE-2026-9193
  • CVE-2026-9195
  • CVE-2026-9203
Alert