Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,638All CVEsplus 19,141 rejected
- 668Last 24 hours2,951 in the last 7 days
- 17,123Last 30 days1,606 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 4 | 9 | 0 | 0 | 14 | 47 |
| 2025 | 0 | 2 | 4 | 0 | 0 | 6 | 33 |
| 2024 | 1 | 2 | 6 | 0 | 0 | 9 | 27 |
| 2023 | 1 | 5 | 4 | 0 | 0 | 10 | 18 |
| 2022 | 2 | 1 | 3 | 0 | 0 | 6 | 8 |
| 2021 | 1 | 0 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-13761 | Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.Pegasystems · Pega Infinity | High8.8 |
| CVE-2026-10754 | Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.Pegasystems · Pega Infinity | High8.6 |
| CVE-2026-14337 | Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.Pegasystems · Pega Infinity | Medium4.6 |
| CVE-2026-1563 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.Pegasystems · Pega Infinity | Medium4.8 |
| CVE-2026-1562 | Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged user with a developer role.Pegasystems · Pega Infinity | Medium4.6 |
| CVE-2025-62180 | Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.Pegasystems · Pega Infinity | High7.1 |
| CVE-2026-1711 | Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role.Pegasystems · Pega Infinity | Medium4.8 |
| CVE-2026-1564 | Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role.Pegasystems · Pega Infinity | Medium5.1 |
| CVE-2026-1079 | A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension.Pegasystems · Pega Browser Extension (PBE) | Medium6.0 |
| CVE-2026-1078 | An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work with Google Chrome or Microsoft Edge.Pegasystems · Pega Robot Studio | High7.2 |
| CVE-2025-62184 | Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.Pegasystems · Pega Infinity | Medium4.8 |
| CVE-2026-0898 | An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robot Studio developers who are automating Google Chrome and Microsoft Edge using either version 22.1 or R25.Pegasystems · Pega Robot Studio | Critical9.0 |
| CVE-2025-62183 | Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality and Integrity are low.Pegasystems · Pega Infinity | Medium4.8 |
| CVE-2025-62182 | Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file.Pegasystems · Pega Infinity | Medium5.3 |
| CVE-2025-62181 | Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user authentication process, a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.Pegasystems · Pega Infinity | Medium5.3 |
| CVE-2025-9559 | Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read dataPegasystems · Pega Infinity | Medium6.5 |
| CVE-2025-8681 | Pega Platform versions 7.1.0 to Infinity 24.2.2 are affected by a Stored XSS issue in a user interface componentPegasystems · Pega Infinity | Medium5.5 |
| CVE-2025-2161 | Pega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with MashupPegasystems · Pega Infinity | High7.1 |
| CVE-2025-2160 | Pega Platform versions 8.4.3 to Infinity 24.2.1 are affected by an XSS issue with MashupPegasystems · Pega Infinity | High8.1 |
| CVE-2024-12211 | Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile.Pegasystems · Pega Infinity | Medium5.4 |
| CVE-2024-10716 | Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.Pegasystems · Pega Infinity | Medium5.9 |
| CVE-2024-10094 | Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of CodePegasystems · Pega Infinity | Critical9.1 |
| CVE-2024-6702 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.Pegasystems · Pega Infinity | Medium5.2 |
| CVE-2024-6701 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.Pegasystems · Pega Infinity | Medium5.5 |
| CVE-2024-6700 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.Pegasystems · Pega Infinity | Medium5.5 |
| CVE-2023-50168 | Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation.Pegasystems · Pega Platform | High7.7 |
| CVE-2023-50167 | Pega Platform from 7.1.7 to 23.1.1 is affected by an XSS issue with editing/rendering user html content.Pegasystems · Pega Platform | Medium5.4 |
| CVE-2023-50166 | Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.Pegasystems · Pega Platform | Medium6.1 |
| CVE-2023-50165 | Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents.Pegasystems · Pega Platform | High8.5 |
| CVE-2023-32089 | Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin descriptionPegasystems · Pega Platform | Medium4.6 |
| CVE-2023-32088 | Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creationPegasystems · Pega Platform | Medium4.6 |
| CVE-2023-32087 | Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creationPegasystems · Pega Platform | Medium4.6 |
| CVE-2023-4843 | Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only…Pegasystems · Pega Platform | Medium4.3 |
| CVE-2023-32090 | Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentialsPegasystems · Pega Platform | Critical9.8 |
| CVE-2023-28094 | Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials.Pegasystems · Pega Platform | High8.1 |
| CVE-2023-26465 | Pega Platform versions 7.2 to 8.8.1 are affected by an XSS issue.Pegasystems · Pega Infinity | High8.0 |
| CVE-2023-28093 | A user with a compromised configuration can start an unsigned binary as a service.Pegasystems · RPA: Synchronization Engine | High7.5 |
| CVE-2023-26467 | A man in the middle can redirect traffic to a malicious server in a compromised configuration.Pegasystems · RPA: Synchronization Engine | High8.1 |
| CVE-2023-26466 | A user with non-Admin access can change a configuration file on the client to modify the Server URL.Pegasystems · RPA: Synchronization Engine | High7.8 |
| CVE-2022-35656 | Pega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to alter CSRF settings directly.Pegasystems · Pega Infinity | Medium6.8 |
| CVE-2022-35655 | Pega Platform from 7.3 to 8.7.3 is affected by an XSS issue due to a misconfiguration of a datapage setting.Pegasystems · Pega Infinity | Medium6.1 |
| CVE-2022-35654 | Pega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.Pegasystems · Pega Infinity | Medium6.1 |
| CVE-2022-24083 | Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks.Pegasystems · Pega Infinity | Critical9.8 |
| CVE-2022-24082 | If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly…Pegasystems · Pega Infinity | Critical9.8 |
| CVE-2021-27654 | Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.Pegasystems · Pega Infinity | High8.8 |
| CVE-2021-27651 | In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks.Pegasystems · Pega Infinity | Critical9.8 |
| CVE-2021-27653 | Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data exposure.Pega Systems · Pega Infinity | Medium6.6 |