PI
Product
Pexip Infinity
57
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 6High 42Medium 8Low 0
Watch
Add Pexip Infinity to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103110 | 9.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a… Affected: before 38.2; 39.0 through 39.1; 40.0 |
| CVE-2020-11805 | 9.8 | Sep 25 | Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN Affected: 23; 23.1 |
| CVE-2015-4719 | 9.8 | Sep 24 | The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request Affected: before 10 |
| CVE-2017-6551 | 9.8 | May 2 | Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Conferencing Nodes Affected: through 14.1 |
| CVE-2026-103109 | 9.4 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory… Affected: before 38.2; 39.0 through 39.1; 40.0 |
| CVE-2025-59683 | 9.1 | Dec 25 | Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, when used with Office 365 Legacy Exchange Tokens Affected: 15 before 38.1 |
| CVE-2026-103105 | 8.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within… Affected: before 38.2; 39.0 through 39.1; 40.0 |
| CVE-2026-103102 | 8.6 | Sep 30 | Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a… Affected: before 41.0 |
| CVE-2022-27933 | 8.2 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join Affected: 24.0 before 27.3 |
| CVE-2022-26656 | 8.2 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join Affected: before 27.3 |
| CVE-2026-103106 | 7.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access… Affected: before 38.2; 39.0 through 39.1; 40.0 |
| CVE-2026-103108 | 7.5 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software… Affected: before 38.2; 39.0 through 39.1; 40.0 |
| CVE-2026-103104 | 7.5 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software… Affected: before 38.2; 39.0 through 39.1; 40.0 |
| CVE-2026-103101 | 7.5 | Sep 30 | Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infinity node… Affected: 30.0 before 41.0 |
| CVE-2026-103100 | 7.5 | Sep 30 | Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a… Affected: before 40.1 |
| CVE-2026-103099 | 7.5 | Sep 30 | Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of… Affected: before 41.1 |
| CVE-2025-32096 | 7.5 | Dec 25 | Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting in a denial of service Affected: 33.0 before 37.1 |
| CVE-2025-66377 | 7.5 | Dec 25 | Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access to execute code on one node… Affected: before 39.0 |
| CVE-2025-32095 | 7.5 | Dec 25 | Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in a… Affected: before 37.0 |
| CVE-2025-66378 | 7.5 | Dec 25 | Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node Affected: 38.0 before 39.0 |
| CVE-2025-48704 | 7.5 | Dec 25 | Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a denial of service Affected: 35.0 before 38.0 |
| CVE-2025-66379 | 7.5 | Dec 25 | Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting… Affected: before 39.0 |
| CVE-2025-30080 | 7.5 | Apr 2 | Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service (software abort) Affected: 29.0 before 37.0 |
| CVE-2024-37917 | 7.5 | Apr 2 | Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (software abort) via a crafted signalling message Affected: before 35.0 |
| CVE-2023-31455 | 7.5 | Dec 25 | Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort Affected: before 31.2 |
| CVE-2023-31289 | 7.5 | Dec 25 | Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort Affected: before 31.2 |
| CVE-2022-32263 | 7.5 | Jul 17 | Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719 Affected: 13 before 28.1 |
| CVE-2022-29286 | 7.5 | Jul 17 | Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling Affected: 27.0 before 28.0 |
| CVE-2022-27937 | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264 Affected: before 27.3 |
| CVE-2022-27936 | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323 Affected: before 28.0 |
| CVE-2022-27935 | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth Affected: 25.0 before 27.3 |
| CVE-2022-27934 | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP Affected: 25.0 before 27.3 |
| CVE-2022-27932 | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join Affected: 24.0 before 27.3 |
| CVE-2022-27931 | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol Affected: 24.0 before 27.3 |
| CVE-2022-27929 | 7.5 | Jul 17 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP Affected: 27.0 before 27.3 |
| CVE-2022-27928 | 7.5 | Jul 17 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol Affected: 27.0 before 27.3 |
| CVE-2022-26657 | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join Affected: before 27.3 |
| CVE-2022-26655 | 7.5 | Jul 17 | Pexip Infinity 27.x before 27.3 has Improper Input Validation Affected: 27.0 before 27.3 |
| CVE-2022-26654 | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP Affected: before 27.3 |
| CVE-2022-23228 | 7.5 | Feb 18 | Pexip Infinity before 27.0 has improper WebRTC input validation Affected: 1.0 before 27.0 |
| CVE-2021-31925 | 7.5 | Jul 7 | Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface Affected: 25.0 before 25.4 |
| CVE-2020-25868 | 7.5 | Jul 7 | Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup Affected: 22.0 before 24.2 |
| CVE-2020-13387 | 7.5 | Sep 25 | Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323 Affected: before 23.4 |
| CVE-2020-12824 | 7.5 | Sep 25 | Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP Affected: 23 before 23.3 |
| CVE-2018-10585 | 7.5 | Sep 25 | Pexip Infinity before 18 allows remote Denial of Service (XML parsing) Affected: before 18 |
| CVE-2018-10432 | 7.5 | Sep 25 | Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP) Affected: 9 before 18 |
| CVE-2019-7178 | 7.2 | Sep 25 | Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup Affected: 9 before 20.1 |
| CVE-2019-7177 | 7.2 | Sep 25 | Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin Affected: 10 before 20.1 |
| CVE-2023-37225 | 6.1 | Dec 25 | Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links Affected: before 32.0 |
| CVE-2017-17477 | 6.1 | Sep 25 | Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views Affected: 10 before 17 |
