PI
Product
Pexip Infinity
by Pexip · last CVE Sep 30, 2026
57
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 6High 42Medium 8Low 0
Watch

Add Pexip Infinity to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-103110
9.8
1%
Sep 30
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a…
Affected: before 38.2; 39.0 through 39.1; 40.0
CVE-2020-11805
9.8
1%
Sep 25
Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN
Affected: 23; 23.1
CVE-2015-4719
9.8
1%
Sep 24
The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request
Affected: before 10
CVE-2017-6551
9.8
4%
May 2
Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Conferencing Nodes
Affected: through 14.1
CVE-2026-103109
9.4
0%
Sep 30
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory…
Affected: before 38.2; 39.0 through 39.1; 40.0
CVE-2025-59683
9.1
0%
Dec 25
Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, when used with Office 365 Legacy Exchange Tokens
Affected: 15 before 38.1
CVE-2026-103105
8.8
0%
Sep 30
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within…
Affected: before 38.2; 39.0 through 39.1; 40.0
CVE-2026-103102
8.6
0%
Sep 30
Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a…
Affected: before 41.0
CVE-2022-27933
8.2
1%
Jul 17
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join
Affected: 24.0 before 27.3
CVE-2022-26656
8.2
1%
Jul 17
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join
Affected: before 27.3
CVE-2026-103106
7.8
0%
Sep 30
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access…
Affected: before 38.2; 39.0 through 39.1; 40.0
CVE-2026-103108
7.5
0%
Sep 30
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software…
Affected: before 38.2; 39.0 through 39.1; 40.0
CVE-2026-103104
7.5
0%
Sep 30
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software…
Affected: before 38.2; 39.0 through 39.1; 40.0
CVE-2026-103101
7.5
0%
Sep 30
Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infinity node…
Affected: 30.0 before 41.0
CVE-2026-103100
7.5
0%
Sep 30
Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a…
Affected: before 40.1
CVE-2026-103099
7.5
0%
Sep 30
Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of…
Affected: before 41.1
CVE-2025-66379
7.5
0%
Dec 25
Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting…
Affected: before 39.0
CVE-2025-66378
7.5
0%
Dec 25
Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node
Affected: 38.0 before 39.0
CVE-2025-66377
7.5
0%
Dec 25
Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access to execute code on one node…
Affected: before 39.0
CVE-2025-48704
7.5
0%
Dec 25
Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a denial of service
Affected: 35.0 before 38.0
CVE-2025-32096
7.5
0%
Dec 25
Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting in a denial of service
Affected: 33.0 before 37.1
CVE-2025-32095
7.5
0%
Dec 25
Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in a…
Affected: before 37.0
CVE-2025-30080
7.5
1%
Apr 2
Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service (software abort)
Affected: 29.0 before 37.0
CVE-2024-37917
7.5
1%
Apr 2
Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (software abort) via a crafted signalling message
Affected: before 35.0
CVE-2023-31455
7.5
1%
Dec 25
Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort
Affected: before 31.2
CVE-2023-31289
7.5
1%
Dec 25
Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort
Affected: before 31.2
CVE-2022-32263
7.5
1%
Jul 17
Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719
Affected: 13 before 28.1
CVE-2022-29286
7.5
1%
Jul 17
Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling
Affected: 27.0 before 28.0
CVE-2022-27937
7.5
1%
Jul 17
Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264
Affected: before 27.3
CVE-2022-27936
7.5
1%
Jul 17
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323
Affected: before 28.0
CVE-2022-27935
7.5
1%
Jul 17
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth
Affected: 25.0 before 27.3
CVE-2022-27934
7.5
1%
Jul 17
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP
Affected: 25.0 before 27.3
CVE-2022-27932
7.5
1%
Jul 17
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join
Affected: 24.0 before 27.3
CVE-2022-27931
7.5
1%
Jul 17
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol
Affected: 24.0 before 27.3
CVE-2022-27929
7.5
1%
Jul 17
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP
Affected: 27.0 before 27.3
CVE-2022-27928
7.5
1%
Jul 17
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol
Affected: 27.0 before 27.3
CVE-2022-26657
7.5
1%
Jul 17
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join
Affected: before 27.3
CVE-2022-26655
7.5
1%
Jul 17
Pexip Infinity 27.x before 27.3 has Improper Input Validation
Affected: 27.0 before 27.3
CVE-2022-26654
7.5
1%
Jul 17
Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP
Affected: before 27.3
CVE-2022-23228
7.5
1%
Feb 18
Pexip Infinity before 27.0 has improper WebRTC input validation
Affected: 1.0 before 27.0
CVE-2021-31925
7.5
1%
Jul 7
Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface
Affected: 25.0 before 25.4
CVE-2020-25868
7.5
1%
Jul 7
Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup
Affected: 22.0 before 24.2
CVE-2020-13387
7.5
1%
Sep 25
Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323
Affected: before 23.4
CVE-2020-12824
7.5
1%
Sep 25
Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP
Affected: 23 before 23.3
CVE-2018-10585
7.5
1%
Sep 25
Pexip Infinity before 18 allows remote Denial of Service (XML parsing)
Affected: before 18
CVE-2018-10432
7.5
1%
Sep 25
Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP)
Affected: 9 before 18
CVE-2019-7178
7.2
2%
Sep 25
Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup
Affected: 9 before 20.1
CVE-2019-7177
7.2
1%
Sep 25
Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin
Affected: 10 before 20.1
CVE-2023-37225
6.1
0%
Dec 25
Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links
Affected: before 32.0
CVE-2017-17477
6.1
1%
Sep 25
Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views
Affected: 10 before 17
Page 1 of 2 · 57 total