CVE-2026-14337

The vulnerability affects the Pega Platform versions 23.1.0 through 25.1.3, specifically within a user interface component that is susceptible to stored cross-site scripting (XSS) attacks. This issue requires a high-privileged user with a developer role to exploit, potentially allowing attackers to execute malicious scripts in the context of other users. Organizations using these versions of the Pega Platform, particularly those with elevated user roles, should prioritize remediation to mitigate the risk of exploitation.