Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-62182 EUVD-2026-2234GHSA-479w-285r-73xg

Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file.

Published Jan 13, 2026 · Updated Jun 3, 2026 · Assigned by Pega

Vendor: Pega Systems Product: Pega Infinity

Description

Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file.

Affected products

VendorProductAffectedFixed
Pegasystems Pega Infinity 8.7.0 – < Infinity 25.1.1 Infinity 25.1.1

Advisories 1

References