Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-1563 EUVD-2026-44727GHSA-pcfw-jm9h-vg4m

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Published Jul 15, 2026 · Updated Jul 15, 2026 · Assigned by Pega

Vendor: Pega Systems Product: Pega Infinity

Description

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Affected products

VendorProductAffectedFixed
Pegasystems Pega Infinity 8.1.0 – < Infinity 25.1.2 Infinity 25.1.2

Advisories 1

References