Pegasystems Vulnerabilities and Affected Products
Vulnerabilities associated with Pega Browser Extension (PBE).
Products
Clear product- Pega Infinity29 vulnerabilities
- Pega Platform10 vulnerabilities
- RPA: Synchronization Engine3 vulnerabilities
- Pega Robot Studio2 vulnerabilities
- Pega Browser Extension (PBE)1 vulnerability
- pega_infinity1 vulnerability
- pega_platform1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-1079MEDIUM | A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension.A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension. A bad actor could create a website that contains malicious code that targets PBE. The vulnerability could occur if a user navigates to this website. The malicious website could then present an unexpected message box. CWE-284Apr 7, 2026 | CVSS6.0v4.0 | EPSS0.26% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |