CVE-2024-50490: Lowcage Pegapoll

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in lowcage PegaPoll pegapoll allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PegaPoll: from n/a through <= 1.0.2.

Affected products

• Lowcage Pegapoll: up to and including 1.0.2
• Szabolcs Szecsenyi Pegapoll: up to and including 1.0.2

Published 2024-10-29. Last modified 2026-06-17.