CVE Catalog
CVE-2026-10754
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk0.57%
44th percentile - higher than 44% of all known CVEs
Summary
Pega Platform versions 8.5.0 through 25.1.2 have an improper validation of cryptographic signatures issue, which may allow an attacker to bypass security controls.
Risk Assessment
An attacker can bypass security mechanisms, potentially leading to unauthorized access to the system or data.
Recommendation
Update Pega Platform to a version newer than 25.1.2 that includes the signature validation fix.
Original NVD description (English source)
Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.