CVE-2026-10754CWE-347

CVE-2026-10754

published August 10, 2026

CVSS

8.6

EPSS

Percentile

55.4

In the wild

Unconfirmed

What it is

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

The record

Technical detail

CVSS: 8.6 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00777 · 55.4th percentile
Weakness: CWE-347 · Improper Verification of Cryptographic Signature
Published: 2026-08-10T22:17Z

References (1)

https://support.pega.com/support-doc/pega-security-advisory-m26-vulnerability-remediation-note · [email protected]

EPSS history

Timeline

10 AUG 17:38Z
Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.
cvelistv5