Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2026-65597 CVE-2026-103110 · GHSA-4qcw-c3r4-gc9h

Out-of-bounds write in Pexip Infinity

Priority MEDIUM 50

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a Pexip Infinity Conferencing Node.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00621 Published 2026-09-30 Fixed in 38.2.0 CWE-787
TI-2026-65596 CVE-2026-103109 · GHSA-584g-7p7q-99pg

Out-of-bounds write in Pexip Infinity

Priority MEDIUM 40

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a den…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00253 Published 2026-09-30 Fixed in 38.2.0 CWE-787
TI-2026-65595 CVE-2026-103108 · GHSA-2xqf-gx7w-hfc7

Reachable assertion in Pexip Infinity

Priority LOW 39

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of service

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00313 Published 2026-09-30 Fixed in 38.2.0 CWE-617
TI-2026-65593 CVE-2026-103105 · GHSA-55q4-5xf4-rr34

Incorrect authorization in Pexip Infinity

Priority LOW 39

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within a Pexip Infinity installation to execute…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00184 Published 2026-09-30 Fixed in 38.2.0 CWE-863
TI-2026-65592 CVE-2026-103104 · GHSA-wfjv-jqf7-vfjh

Reachable assertion in Pexip Infinity

Priority LOW 39

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00313 Published 2026-09-30 Fixed in 38.2.0 CWE-617