Skip to content
OpenAdvisories
Medium · 4.6 CVE-2026-14337 EUVD-2026-52686GHSA-rc9g-38jr-hhrj

Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Published Aug 4, 2026 · Updated Aug 4, 2026 · Assigned by Pega

Vendor: Pega Systems Product: Pega Infinity

Description

Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Affected products

VendorProductAffectedFixed
Pegasystems Pega Infinity 23.1.0 – < Infinity 25.1.4 Infinity 25.1.4

Advisories 1

References