Skip to content
OpenAdvisories
Medium · 5.1 CVE-2026-1564 EUVD-2026-23112GHSA-hm98-22vr-c62v

Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.

Published Apr 15, 2026 · Updated Apr 16, 2026 · Assigned by Pega

Vendor: Pega Systems Product: Pega Infinity

Description

Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.

Affected products

VendorProductAffectedFixed
Pegasystems Pega Infinity 8.1.0 – < Infinity 25.1.2 Infinity 25.1.2

Advisories 1

References