IN
Product
Infinity
15
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 2High 13Medium 0Low 0
Watch
Add Infinity to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103110 | 9.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a… Affected: before 38.2.0; 39.0.0; 39.1.0; 40.0.0 |
| CVE-2026-103109 | 9.4 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory… Affected: before 38.2.0; 39.0.0; 39.1.0; 40.0.0 |
| CVE-2026-103105 | 8.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within… Affected: before 38.2.0; 39.0.0; 39.1.0; 40.0.0 |
| CVE-2026-103102 | 8.6 | Sep 30 | Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a… Affected: before 41.0.0 |
| CVE-2026-103106 | 7.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access… Affected: before 38.2.0; 39.0.0; 39.1.0; 40.0.0 |
| CVE-2026-103108 | 7.5 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software… Affected: before 38.2.0; 39.0.0; 39.1.0; 40.0.0 |
| CVE-2026-103104 | 7.5 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software… Affected: before 38.2.0; 39.0.0; 39.1.0; 40.0.0 |
| CVE-2026-103101 | 7.5 | Sep 30 | Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infinity node… Affected: 30.0.0 before 41.0.0 |
| CVE-2026-103100 | 7.5 | Sep 30 | Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a… Affected: before 40.1.0 |
| CVE-2026-103099 | 7.5 | Sep 30 | Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of… Affected: 18.0.0 before 41.1.0 |
| CVE-2021-42555 | 7.5 | Jan 15 | Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation Affected: 25.0 before 26.2 |
| CVE-2021-35969 | 7.5 | Jan 15 | Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validation Affected: 22.0 before 26 |
| CVE-2021-33499 | 7.5 | Jan 15 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2) Affected: before 26 |
| CVE-2021-33498 | 7.5 | Jan 15 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2) Affected: before 26 |
| CVE-2021-32545 | 7.5 | Jan 15 | Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation Affected: before 26 |
Showing 15