CVE-2022-27937

CVE-2022-27937 affects Pexip Infinity prior to version 27.3. The vulnerability allows remote attackers to trigger excessive resource consumption via H.264, leading to denial of service (availability impact). The issue is mitigated by upgrading to version 27.3 or later as indicated in security adv...

CVE-2022-26656

CVE-2022-26656 affects Pexip Infinity prior to 27.3. The vulnerability is described across multiple sources as an input validation error in the One Touch Join flow that can allow remote attackers to trigger a software abort and potentially enumerate usernames. Concrete affected product/version: P...

CVE-2022-26654

Pexip Infinity vulnerable before 27.3, where an HTTP-based flaw allows remote attackers to force a software abort. Products affected: Pexip Infinity prior to 27.3 (per CVE-2022-26654). The issue is described as an injection/abort condition triggered via HTTP, with impact stated as a software abor...

CVE-2022-26657

CVE-2022-26657 affects Pexip Infinity prior to 27.3, where an input validation error in One Touch Join allows remote attackers to trigger a software abort, causing denial of service. The issue is documented across multiple feeds (Red Hat, CNVD, NVD) with the same impact. Affected product/version:...

CVE-2022-27936

Summary: CVE-2022-27936 affects Pexip Infinity prior to 27.3, where remote attackers can trigger a software abort via H.323, effectively a denial of service. Affected versions: before 27.3. Impact: remote, unauthenticated trigger leading to a crash (DoS). Remediation: upgrade to version 27.3 or l...

CVE-2015-4719

CVE-2015-4719 affects Pexip Infinity prior to v10, where the client API authentication mechanism allows remote attackers to gain privileges via a crafted request. Documents from NVD/Red Hat/CVE lists repeat this description and identify the impact as privilege escalation with network access and n...

CVE-2024-33850

Pexip Infinity versions prior to 34.1 are vulnerable to an improper access control flaw. This vulnerability allows individuals in a meeting waiting room to view the conference roster list and perform certain restricted actions before being officially admitted to the meeting. To remediate this iss...

CVE-2020-13387

The CVE-2020-13387 entry applies to Pexip Infinity prior to version 23.4, where a lack of input validation leads to a temporary denial of service via H.323. The vulnerability is documented across multiple sources (NVD/CNVD), confirming the affected product family and root cause, and indicating th...

CVE-2023-37225

Pexip Infinity before version 32 contains a cross-site scripting (XSS) flaw in the Webapp1 component via preconfigured links. Affected product: Pexip Infinity prior to 32. Root cause: XSS in the legacy Webapp1 workflow. Impact, per sources, centers on client-side script execution with user intera...

CVE-2018-10585

Pexip Infinity before 18 is affected by a remote Denial of Service caused by an XML parsing issue. Multiple connected sources (Red Hat, CNVD, NVD, PRION and CVE records) confirm the vulnerability exists in Pexip Infinity prior to version 18 and describe the impact as DoS via XML parsing. The root...

CVE-2020-24615

Summary: CVE-2020-24615 affects Pexip Infinity before version 24.1, due to improper input validation that can cause a temporary denial of service over SIP. Affected software (from provided docs): Pexip Infinity (video conferencing platform); versions prior to 24.1. Root cause (as stated): Imprope...

CVE-2026-103110

Pexip Infinity is affected by an improper input validation vulnerability in the Conferencing Node. This flaw allows a remote attacker to achieve remote code execution (RCE) as an unprivileged user . The affected versions include those before 38.2 , as well as versions 39.0, 39.1, and 40.0 . No sp...

CVE-2023-31455

Pexip Infinity prior to version 31.2 is affected by an Improper Input Validation in RTCP handling. The root cause is improper validation of RTCP inputs, which allows remote attackers to trigger an abort. Affected product: Pexip Infinity (versions before 31.2). Impact as described: possibility to ...

CVE-2024-37917

The video conferencing cloud collaboration platform Pexip Infinity versions prior to 35.0 are vulnerable to a denial of service (software abort) . The root cause is improper input validation that allows a remote attacker to trigger the crash via a crafted signalling message . To resolve this issu...

CVE-2025-66377

CVE-2025-66377 affects Pexip Infinity prior to 39.0. A missing authentication for a critical function in a product-internal API allows an attacker who already has code execution on one node to impact the operation of other nodes in the installation. This is not listed as exploitable in the provid...

CVE-2023-31289

CVE-2023-31289 affects Pexip Infinity prior to version 31.2. The root cause is improper input validation for signalling, allowing remote attackers to trigger a service abort. Impact is a potential denial of service. Remediation per available sources is to upgrade to version 31.2 or later or apply...

CVE-2026-103109

The Pexip Infinity platform is affected by an improper input validation vulnerability within its media implementation . This flaw allows a remote attacker to provide a crafted media stream that can trigger a software abort leading to a denial of service or potentially achieve memory corruption . ...

CVE-2026-103108

The software Pexip Infinity versions before 38.2, as well as 39.0, 39.1, and 40.0, is vulnerable to a denial of service condition. This is caused by improper input validation within the media implementation , which allows a remote attacker to trigger a software abort. No specific exploit details ...

CVE-2025-32095

Affected software: Pexip Infinity (before 37.0). Vulnerability detail: improper input validation in signalling allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in denial of service. This is consistently reported across CVE entries (NVD/Red Hat/EUVD/...

CVE-2026-103105

Pexip Infinity versions before 38.2, and specifically versions 39.0, 39.1, and 40.0, are affected by improper access control on a product-internal API. An attacker with local access to a node within a Pexip Infinity installation can exploit this flaw to execute arbitrary code as an unprivileged u...

CVE-2025-66379

Pexip Infinity prior to 39.0 is affected by an improper input validation flaw in the media implementation. A remote attacker can exploit a crafted media stream to trigger a software abort, resulting in a denial of service. Affected product/version: Pexip Infinity

CVE-2026-103102

Pexip Infinity versions prior to 41.0 are vulnerable to a denial of service (DoS) condition due to improper input validation within the signaling implementation . A remote attacker can trigger a software abort by accessing a gateway call from a WebRTC/API client . No specific remediation or explo...

CVE-2026-103100

Pexip Infinity versions prior to 40.1 are vulnerable to a denial of service (DoS) condition. The root cause is improper input validation within the signaling implementation , which allows a malicious attacker to trigger a software abort . No specific exploit information or remediation details are...

CVE-2026-103104

The software Pexip Infinity is vulnerable to a denial of service (DoS) condition due to improper input validation in the media implementation. Affected versions include those before 38.2 , as well as versions 39.0 , 39.1 , and 40.0 . A remote attacker can exploit this vulnerability to trigger a s...

CVE-2026-103099

Pexip Infinity versions prior to 41.1 are vulnerable to a denial of service (DoS) condition. The root cause is improper input validation within the media implementation , which can be exploited by a remote attacker to trigger a software abort . No specific exploit information or remediation steps...

CVE-2026-103106

Pexip Infinity versions prior to 38.2 , as well as versions 39.0 , 39.1 , and 40.0 , are vulnerable to a privilege escalation flaw. The root cause is improper input validation within an internal Pexip Infinity service. An attacker with local access can escalate privileges to root , provided they ...