VULNERABILITY INTELLIGENCE
CVE-2026-10754
EPSS probability0.78%
CISA KEVNot currently listed
Published2026-08-10
Last modified2026-10-23
Description
Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.
Weakness classification
- security@pega.com: CWE-347