CVE-2026-1563

A reflected cross-site scripting (XSS) vulnerability exists in the user interface component of Pega Platform versions 8.1.0 through 25.1.2, which can be exploited by high-privileged users with developer roles. Successful exploitation could allow attackers to execute arbitrary scripts in the context of affected users, potentially leading to data exposure or session hijacking. Organizations using these versions of Pega Platform should prioritize patching to mitigate the risk associated with this vulnerability.