IN
Product
Infinity
24
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 3High 19Medium 2Low 0
Watch
Add Infinity to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103105 | 8.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within… Affected: before 38.2.0; 39.0.0; 39.1.0; 40.0.0 |
| CVE-2026-103102 | 8.6 | Sep 30 | Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a… Affected: before 41.0.0 |
| CVE-2026-103106 | 7.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access… Affected: before 38.2.0; 39.0.0; 39.1.0; 40.0.0 |
| CVE-2026-103108 | 7.5 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software… Affected: before 38.2.0; 39.0.0; 39.1.0; 40.0.0 |
| CVE-2026-103104 | 7.5 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software… Affected: before 38.2.0; 39.0.0; 39.1.0; 40.0.0 |
| CVE-2026-103101 | 7.5 | Sep 30 | Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infinity node… Affected: 30.0.0 before 41.0.0 |
| CVE-2026-103100 | 7.5 | Sep 30 | Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a… Affected: before 40.1.0 |
| CVE-2026-103099 | 7.5 | Sep 30 | Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of… Affected: 18.0.0 before 41.1.0 |
| CVE-2025-66378 | 7.5 | Dec 25 | Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node Affected: 38.0 before 39.0 |
| CVE-2025-66377 | 7.5 | Dec 25 | Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access to execute code on one node… Affected: before 39.0 |
| CVE-2025-66379 | 7.5 | Dec 25 | Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting… Affected: before 39.0 |
| CVE-2025-32096 | 7.5 | Dec 25 | Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting in a denial of service Affected: 33.0 before 37.1 |
| CVE-2025-48704 | 7.5 | Dec 25 | Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a denial of service Affected: 35.0 before 38.0 |
| CVE-2025-32095 | 7.5 | Dec 25 | Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in a… Affected: before 37.0 |
| CVE-2021-42555 | 7.5 | Jan 15 | Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation Affected: 25.0 before 26.2 |
| CVE-2021-35969 | 7.5 | Jan 15 | Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validation Affected: 22.0 before 26 |
| CVE-2021-33499 | 7.5 | Jan 15 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2) Affected: before 26 |
| CVE-2021-33498 | 7.5 | Jan 15 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2) Affected: before 26 |
| CVE-2021-32545 | 7.5 | Jan 15 | Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation Affected: before 26 |
Showing 19