CVE-2021-27651: Pega Infinity

Critical severity, CVSS 9.8. EPSS: 53.8% chance of exploitation in the next 30 days.

In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks.

Affected products

• Pega Infinity: from 8.2.1, up to and including 8.5.2

Published 2021-04-29. Last modified 2026-06-17.