← All advisories

High severity7.8NVD Advisory· Published Apr 10, 2023· Updated Jun 17, 2026

CVE-2023-26466

CVE-2023-26466

Description

A user with non-Admin access can change a configuration file on the client to modify the Server URL.

Affected products

3

Pega/Synchronization Engine
cpe:2.3:a:pega:synchronization_engine:*:*:*:*:*:*:*:*
Range: >=3.1.1,<3.1.30
Pega/Pega Robotics and Workforce Intelligencellm-fuzzy
Pegasystems/RPA: Synchronization Enginev5
Range: 3.1.1

Patches

Vulnerability mechanics

References

1

support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilegenvdVendor Advisory

News mentions

0

No linked articles in our index yet.