Ghostwire

CVE-2026-1564: Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface...

MEDIUM CVSS 5.0

Published: April 15, 2026 | Last Modified: April 16, 2026

Description

Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.

Ghostwire Analysis — What This Means Practically

Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References

www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-1564
www.tenable.com/cve/CVE-2026-1564
nvd.nist.gov/vuln/detail/CVE-2026-1564