CVEs we hold for Pegasystems
Records whose assigning authority named Pegasystems as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-1711Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user…Pegasystems Pega Infinity
CVE-2026-1564Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface…Pegasystems Pega Infinity
CVE-2026-1563Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a…Pegasystems Pega Infinity
CVE-2026-1562Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a…Pegasystems Pega Infinity
CVE-2026-14337Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a…Pegasystems Pega Infinity
CVE-2026-13761Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop…Pegasystems Pega Infinity
CVE-2026-1079A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic…Pegasystems Pega Browser Extension (PBE)
CVE-2026-1078An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or…Pegasystems Pega Robot Studio
CVE-2026-10754Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may…Pegasystems Pega Infinity
CVE-2026-0898An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robot Studio developers who are…Pegasystems Pega Robot Studio
CVE-2025-9559Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user…Pegasystems Pega Infinity
CVE-2025-8681Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface componentPegasystems Pega Infinity
CVE-2025-62184Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user…Pegasystems Pega Infinity
CVE-2025-62183Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-site Scripting vulnerability in a user…Pegasystems Pega Infinity
CVE-2025-62182Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability…Pegasystems Pega Infinity
CVE-2025-62181Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user…Pegasystems Pega Infinity
CVE-2025-62180Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow…Pegasystems Pega Infinity
46 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.