Pegasystems security advisories

5 advisories · 2 critical or high in 12 months · latest Aug 28

Advisories page

5 advisories

Date	Advisory	Severity	Fixed in
Aug 28	Pegasystems Pega Infinity: denial of service High8.8Aug 28 CVE-2026-13761Infinity 25.1.3	High8.8	Infinity 25.1.3
Aug 10	Pegasystems Pega Infinity: improper signature check High8.6Aug 10 CVE-2026-10754Infinity 25.1.3	High8.6	Infinity 25.1.3
Aug 4	Pegasystems Pega Infinity: cross-site scripting Medium4.6Aug 4 CVE-2026-14337Infinity 25.1.4	Medium4.6	Infinity 25.1.4
Jul 15	Pegasystems Pega Infinity: cross-site scripting Medium4.6Jul 15 CVE-2026-1562Infinity 25.1.2	Medium4.6	Infinity 25.1.2
Jul 15	Pegasystems Pega Infinity: cross-site scripting Medium4.8Jul 15 CVE-2026-1563Infinity 25.1.2	Medium4.8	Infinity 25.1.2

About Pegasystems

Security advisories Pegasystems publishes for its own products.

www.pega.com/trust/security-advisories Pegasystems

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.