CVE-2024-10094

Summary

CVE-2024-10094 is a newly disclosed vulnerability that affects Pega Platform versions 6.x to Infinity 24.1.1. This issue involves Improper Control of Generation of Code, allowing attackers to inject malicious code and potentially gain unauthorized access or control over affected systems. The exact nature of the attack requires further investigation, but affected organizations are advised to update their Pega Platform installations as soon as possible to mitigate the risk. Successful exploitation of this vulnerability could lead to significant data breaches or system compromises.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.