Resolution of Pega Website Access and PHP Vulnerability Assessment
 

Key Takeaways 

All Services Restored: Pega.com and all associated websites, including the Pega Customer Engagement Blueprint, are fully online and accessible. 
 
Core Systems Secure: Pega Cloud and Pega Platform environments are completely unaffected by these vulnerabilities. 
 
No Client Action Required: No hotfixes, configuration changes, or remediations are needed for Pega Platform or associated offerings. 
 
No Compromise Detected: A thorough investigation confirmed no evidence of any compromise or unauthorized access. 
 

Situation & Resolution Summary 

Out of an abundance of caution, Pega.com and associated marketing websites were temporarily taken offline at approximately 9:00 AM ET on Wednesday, October 21, until patches could be applied to critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619). 
 
Our web hosting provider successfully deployed and validated the necessary security patches. All impacted websites were safely restored to service as of 11:00 PM ET on Wednesday, October 21.