Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Pexip Infinity 39.0 Clear all filters
TI-2025-40875 CVE-2025-66443 · GHSA-96px-f628-2m88

Reachable assertion in Pexip Infinity

Priority LOW 39

Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00312 Published 2025-12-25 Fixed in 39.0 CWE-617
TI-2025-40823 CVE-2025-66379 · GHSA-g75q-8q7j-ggf3

Reachable assertion in Pexip Infinity

Priority LOW 39

Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting in a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00372 Published 2025-12-25 Fixed in 39.0 CWE-617
TI-2025-40822 CVE-2025-66378 · GHSA-34j4-424f-xr64

Incorrect authorization in Pexip Infinity

Priority LOW 32

Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00254 Published 2025-12-25 Fixed in 39.0 CWE-863
TI-2025-40821 CVE-2025-66377 · GHSA-cxwj-2rvj-cg44

Missing authentication in Pexip Infinity

Priority LOW 34

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access to execute code on one node within a Pexip Infinity installation) to i…

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00212 Published 2025-12-25 Fixed in 39.0 CWE-306