CVE-2023-28093: Pega Synchronization Engine

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

A user with a compromised configuration can start an unsigned binary as a service.

Affected products

• Pega Synchronization Engine: from 3.1.1, before 3.1.30 (fixed in 3.1.30)

Published 2023-04-10. Last modified 2026-06-17.