CVE-2024-10094

Summary

CVE-2024-10094 is a cybersecurity vulnerability affecting Pega Platform versions 6.x to Infinity 24.1.1. This issue involves the improper control of code generation, enabling attackers to potentially inject and execute malicious code. The consequence could lead to unauthorized system access, data theft, or even system takeover. Organizations using the affected Pega Platform versions are advised to apply the necessary patches or updates as soon as possible to mitigate the risk. Failure to do so may result in significant data breaches or business disruptions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.