Skip to content
OpenAdvisories
Medium · 4.6 CVE-2026-1562 EUVD-2026-44726GHSA-9j28-r64w-w53x

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Published Jul 15, 2026 · Updated Jul 15, 2026 · Assigned by Pega

Vendor: Pega Systems Product: Pega Infinity

Description

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Affected products

VendorProductAffectedFixed
Pegasystems Pega Infinity 8.1.0 – < Infinity 25.1.2 Infinity 25.1.2

Advisories 1

References