CVE-2023-28094: Pega Platform

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials.

Affected products

• Pega Pega Platform: from 6.1, up to and including 8.8.3

Published 2023-06-22. Last modified 2026-06-17.