CVE-2026-1563 — Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a…

CVE-2026-1563

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role. PUBLISHED

Description (CNA)

Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.

Affected (CNA)

Vendor / product	Versions
Pegasystems / Pega Infinity	affected 8.1.0 before Infinity 25.1.2

CWE

CWE-79

References

https://support.pega.com/support-doc/pega-security-advisory-e26-vulnerability-remediation-note

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.