CVE-2026-10754

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

Score

CVSS 4.0 8.6 High

Status

Awaiting Analysis - security@pega.com

Published

2026-08-10

Last modified

2026-10-23

Weaknesses

CWE-347

Affected products

• Pega Infinity (Pegasystems)

References

• https://support.pega.com/support-doc/pega-security-advisory-m26-vulnerability-remediation-note