Skip to content
OpenAdvisories
High · 8.6 CVE-2026-10754 EUVD-2026-55683GHSA-g9g7-h67p-37m6

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

Published Aug 10, 2026 · Updated Aug 11, 2026 · Assigned by Pega

Vendor: Pega Systems Product: Pega Infinity

Description

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

Affected products

VendorProductAffectedFixed
Pegasystems Pega Infinity 8.5.0 – < Infinity 25.1.3 Infinity 25.1.3

Advisories 1

References