CVE-2026-1562 Pega CVE debrief

Who should care

Users of Pega Platform versions 8.1.0 through 25.1.2, particularly those with high privileged roles, should be aware of this vulnerability and take necessary precautions.

Technical summary

The vulnerability is a Stored Cross-site scripting (XSS) issue in a user interface component of Pega Platform. The Common Vulnerabilities and Exposures (CVE) score for this issue is 4.6, and the Common Vulnerability Scoring System (CVSS) severity is rated as MEDIUM. The vulnerability is exploitable via network and requires a high privileged user with a developer role.

Defensive priority

Medium priority should be given to patching or mitigating this vulnerability, especially in environments where high privileged users with developer roles are present.

Recommended defensive actions

• Apply the latest patches or updates from Pega to address this vulnerability.
• Restrict access to the affected user interface component to only necessary users.
• Monitor for any suspicious activity related to this vulnerability.
• Consider implementing additional security measures, such as web application firewalls or intrusion detection systems.

Evidence notes

The CVE record was published on 2026-07-15T17:16:46.737Z and was last modified on 2026-07-21T16:55:39.150Z. The NVD entry is currently Analyzed. The vulnerability affects Pega Platform versions 8.1.0 through 25.1.2 and requires a high privileged user with a developer role to exploit. The CVE score is 4.6 and the CVSS severity is MEDIUM. Defenders should verify the affected scope, severity, and vendor guidance.

Official resources