CVE-2026-10754

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

State: Published
Severity: 8.6 High
Published: Aug 10, 2026
Updated: Aug 11, 2026
Reserved: Jun 3, 2026

Read the record on cve.org

Description

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

Scores

CVSS	Score	Vector	Source
4.0	8.6 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N	Pega

Weaknesses

CWE-347 Improper Verification of Cryptographic Signature

Affected Products

Product	Versions
Pega InfinityPegasystems	8.5.0 to before Infinity 25.1.3Affected

References

https://support.pega.com/support-doc/pega-security-advisory-m26-vulnerability-remediation-note

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.