CVE-2026-103102

Pexip Infinity versions prior to 41.0 are vulnerable to a denial of service (DoS) condition due to improper input validation within the signaling implementation . A remote attacker can trigger a software abort by accessing a gateway call from a WebRTC/API client . No specific remediation or explo...

EUVD-2026-89575

Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a denial of service...

rtcmulticonnection-client path traversal vulnerability

rtcmulticonnection-client is a signaling implementation of RTCMultiConnection.js based on Node.js and Scoket.io. A path traversal vulnerability exists in rtcmulticonnection-client. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

CVE-2017-16125

rtcmulticonnection-client is a signaling implementation for RTCMultiConnection.js, a multi-session manager. rtcmulticonnection-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16125

rtcmulticonnection-client is vulnerable to directory traversal via URLs containing ../../.. sequences, enabling access to files outside the intended directory. This vulnerability is documented across CVE-2017-16125 entries and related advisories (GHSA, OSV, CNVD, CNVD variants). The root cause is...