CVE-2026-1562

The vulnerability affects the Pega Platform versions 8.1.0 through 25.1.2, allowing stored cross-site scripting (XSS) attacks through a user interface component, but only when exploited by a high-privileged user with a developer role. Successful exploitation could lead to unauthorized access to sensitive information or manipulation of the application. Organizations utilizing these versions of the Pega Platform, particularly those with developer roles, should prioritize remediation to mitigate potential risks.