PE
Vendor
Pexip
76
CVEs
0
On KEV
20
New 30D
Products
PI9.8
Pexip Infinity
Pexip
57 CVEs0 on KEV10 new
IN9.8
Infinity
Pexip
15 CVEs0 on KEV10 new
IC9.8
Infinity Connect
Pexip
2 CVEs0 on KEV0 new
RP9.8
Reverse Proxy And Turn Server
Pexip
1 CVEs0 on KEV0 new
VM5.3
Virtual Meeting Rooms
Pexip
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103110 | IN Infinity Pexip | 9.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a… |
| CVE-2026-103109 | IN Infinity Pexip | 9.4 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory… |
| CVE-2026-103108 | IN Infinity Pexip | 7.5 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software… |
| CVE-2026-103106 | IN Infinity Pexip | 7.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access… |
| CVE-2026-103105 | IN Infinity Pexip | 8.8 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper access control on a product-internal API which allows an attacker with local access to a node within… |
| CVE-2026-103104 | IN Infinity Pexip | 7.5 | Sep 30 | Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software… |
| CVE-2026-103102 | IN Infinity Pexip | 8.6 | Sep 30 | Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a… |
| CVE-2026-103101 | IN Infinity Pexip | 7.5 | Sep 30 | Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infinity node… |
| CVE-2026-103100 | IN Infinity Pexip | 7.5 | Sep 30 | Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a… |
| CVE-2026-103099 | IN Infinity Pexip | 7.5 | Sep 30 | Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of… |
| CVE-2025-66443 | PI Pexip Infinity Pexip | 5.3 | Dec 25 | Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that allows an attacker… |
| CVE-2025-66379 | PI Pexip Infinity Pexip | 7.5 | Dec 25 | Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting… |
| CVE-2025-66378 | PI Pexip Infinity Pexip | 7.5 | Dec 25 | Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node |
| CVE-2025-66377 | PI Pexip Infinity Pexip | 7.5 | Dec 25 | Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access to execute code on one node… |
| CVE-2025-59683 | PI Pexip Infinity Pexip | 9.1 | Dec 25 | Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, when used with Office 365 Legacy Exchange Tokens |
| CVE-2025-49088 | PI Pexip Infinity Pexip | 5.9 | Dec 25 | Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the OTJ service,… |
| CVE-2025-48704 | PI Pexip Infinity Pexip | 7.5 | Dec 25 | Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a denial of service |
| CVE-2025-32096 | PI Pexip Infinity Pexip | 7.5 | Dec 25 | Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting in a denial of service |
| CVE-2025-32095 | PI Pexip Infinity Pexip | 7.5 | Dec 25 | Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in a… |
| CVE-2025-30080 | PI Pexip Infinity Pexip | 7.5 | Apr 2 | Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service (software abort) |
| CVE-2024-37917 | PI Pexip Infinity Pexip | 7.5 | Apr 2 | Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (software abort) via a crafted signalling message |
| CVE-2024-33850 | PI Pexip Infinity Pexip | 4.3 | Jun 10 | Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room |
| CVE-2023-40236 | VM Virtual Meeting Rooms Pexip | 5.3 | Dec 25 | In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authentication bypass |
| CVE-2023-37225 | PI Pexip Infinity Pexip | 6.1 | Dec 25 | Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links |
| CVE-2023-31455 | PI Pexip Infinity Pexip | 7.5 | Dec 25 | Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort |
| CVE-2023-31289 | PI Pexip Infinity Pexip | 7.5 | Dec 25 | Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort |
| CVE-2022-32263 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719 |
| CVE-2022-29286 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling |
| CVE-2022-27937 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264 |
| CVE-2022-27936 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323 |
| CVE-2022-27935 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth |
| CVE-2022-27934 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP |
| CVE-2022-27933 | PI Pexip Infinity Pexip | 8.2 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join |
| CVE-2022-27932 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join |
| CVE-2022-27931 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol |
| CVE-2022-27930 | PI Pexip Infinity Pexip | 5.9 | Jul 17 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique Identifier is guessed |
| CVE-2022-27929 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP |
| CVE-2022-27928 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol |
| CVE-2022-26657 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join |
| CVE-2022-26656 | PI Pexip Infinity Pexip | 8.2 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join |
| CVE-2022-26655 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity 27.x before 27.3 has Improper Input Validation |
| CVE-2022-26654 | PI Pexip Infinity Pexip | 7.5 | Jul 17 | Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP |
| CVE-2022-25357 | PI Pexip Infinity Pexip | 5.3 | Jul 17 | Pexip Infinity 27.x before 27.2 has Improper Access Control |
| CVE-2022-23228 | PI Pexip Infinity Pexip | 7.5 | Feb 18 | Pexip Infinity before 27.0 has improper WebRTC input validation |
| CVE-2021-29656 | IC Infinity Connect Pexip | 9.8 | Feb 18 | Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation |
| CVE-2021-29655 | IC Infinity Connect Pexip | 9.8 | Feb 18 | Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks |
| CVE-2021-42555 | IN Infinity Pexip | 7.5 | Jan 15 | Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation |
| CVE-2021-35969 | IN Infinity Pexip | 7.5 | Jan 15 | Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validation |
| CVE-2021-33499 | IN Infinity Pexip | 7.5 | Jan 15 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2) |
| CVE-2021-33498 | IN Infinity Pexip | 7.5 | Jan 15 | Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2) |
| CVE-2021-32545 | IN Infinity Pexip | 7.5 | Jan 15 | Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation |
| CVE-2021-31925 | PI Pexip Infinity Pexip | 7.5 | Jul 7 | Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface |
| CVE-2020-25868 | PI Pexip Infinity Pexip | 7.5 | Jul 7 | Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup |
| CVE-2020-24615 | PI Pexip Infinity Pexip | 5.3 | Sep 25 | Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP |
| CVE-2020-13387 | PI Pexip Infinity Pexip | 7.5 | Sep 25 | Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323 |
| CVE-2020-12824 | PI Pexip Infinity Pexip | 7.5 | Sep 25 | Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP |
| CVE-2020-11805 | RP Reverse Proxy And Turn Server Pexip | 9.8 | Sep 25 | Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN |
| CVE-2019-7178 | PI Pexip Infinity Pexip | 7.2 | Sep 25 | Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup |
| CVE-2019-7177 | PI Pexip Infinity Pexip | 7.2 | Sep 25 | Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin |
| CVE-2018-10585 | PI Pexip Infinity Pexip | 7.5 | Sep 25 | Pexip Infinity before 18 allows remote Denial of Service (XML parsing) |