CVE-2021-27654: Pega Infinity

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.

Affected products

• Pega Infinity: from 8.2.1, up to and including 8.6.1

Published 2022-01-28. Last modified 2026-06-17.