Vulnerability in Pegasystems Pega Infinity

CVE-2026-10754

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

Affected products

Weakness classification (CWE)

References