CVE-2023-26467: Pega Synchronization Engine

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A man in the middle can redirect traffic to a malicious server in a compromised configuration.

Affected products

• Pega Synchronization Engine: from 3.1.1, before 3.1.30 (fixed in 3.1.30)

Published 2023-04-10. Last modified 2026-06-17.