Priority MEDIUM 50
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a Pexip Infinity Conferencing Node.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00621 · Published 2026-09-30 · Fixed in 38.2.0 CWE-787
Priority MEDIUM 40
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a den…
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.00253 · Published 2026-09-30 · Fixed in 38.2.0 CWE-787
Priority LOW 39
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of service
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00313 · Published 2026-09-30 · Fixed in 38.2.0 CWE-617
Priority LOW 35
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00141 · Published 2026-09-30 · Fixed in 38.2.0 CWE-669
Priority LOW 39
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within a Pexip Infinity installation to execute…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00184 · Published 2026-09-30 · Fixed in 38.2.0 CWE-863
Priority LOW 39
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00313 · Published 2026-09-30 · Fixed in 38.2.0 CWE-617