Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-10754

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

Description

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pegasystems Pega Infinity

Default version status: unaffected

  • 8.5.0 to < Infinity 25.1.3affected

References