PT-2026-51527 · Pegasystems · Pega Infinity

Published 2026-06-23 · Updated 2026-06-23 · CVE-2025-62180

Mitre

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-62180

Affected Products

Pega Infinity

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-62180 · Security Note
• https://support.pega.com/support-doc/pega-security-advisory-i25-vulnerability-remediation-note · Note
• https://support.pega.com/support-doc/pega-security-advisory-h26-vulnerability-remediation-note · Note