CVE-2022-26656

CVE-2022-26656 affects Pexip Infinity prior to 27.3. The vulnerability is described across multiple sources as an input validation error in the One Touch Join flow that can allow remote attackers to trigger a software abort and potentially enumerate usernames. Concrete affected product/version: P...

CVE-2022-26654

Pexip Infinity vulnerable before 27.3, where an HTTP-based flaw allows remote attackers to force a software abort. Products affected: Pexip Infinity prior to 27.3 (per CVE-2022-26654). The issue is described as an injection/abort condition triggered via HTTP, with impact stated as a software abor...

CVE-2022-27936

Summary: CVE-2022-27936 affects Pexip Infinity prior to 27.3, where remote attackers can trigger a software abort via H.323, effectively a denial of service. Affected versions: before 27.3. Impact: remote, unauthenticated trigger leading to a crash (DoS). Remediation: upgrade to version 27.3 or l...

CVE-2022-26657

CVE-2022-26657 affects Pexip Infinity prior to 27.3, where an input validation error in One Touch Join allows remote attackers to trigger a software abort, causing denial of service. The issue is documented across multiple feeds (Red Hat, CNVD, NVD) with the same impact. Affected product/version:...

CVE-2022-27937

CVE-2022-27937 affects Pexip Infinity prior to version 27.3. The vulnerability allows remote attackers to trigger excessive resource consumption via H.264, leading to denial of service (availability impact). The issue is mitigated by upgrading to version 27.3 or later as indicated in security adv...

CVE-2015-4719

CVE-2015-4719 affects Pexip Infinity prior to v10, where the client API authentication mechanism allows remote attackers to gain privileges via a crafted request. Documents from NVD/Red Hat/CVE lists repeat this description and identify the impact as privilege escalation with network access and n...

CVE-2020-13387

The CVE-2020-13387 entry applies to Pexip Infinity prior to version 23.4, where a lack of input validation leads to a temporary denial of service via H.323. The vulnerability is documented across multiple sources (NVD/CNVD), confirming the affected product family and root cause, and indicating th...

CVE-2024-33850

CVE-2024-33850 affects Pexip Infinity prior to 34.1. The issue is improper access control for people in a waiting room: they can view the conference roster and perform actions that should be restricted until admission. Documents from multiple sources confirm the affected product/versions and the ...

CVE-2023-37225

Pexip Infinity before version 32 contains a cross-site scripting (XSS) flaw in the Webapp1 component via preconfigured links. Affected product: Pexip Infinity prior to 32. Root cause: XSS in the legacy Webapp1 workflow. Impact, per sources, centers on client-side script execution with user intera...

CVE-2018-10585

Pexip Infinity before 18 is affected by a remote Denial of Service caused by an XML parsing issue. Multiple connected sources (Red Hat, CNVD, NVD, PRION and CVE records) confirm the vulnerability exists in Pexip Infinity prior to version 18 and describe the impact as DoS via XML parsing. The root...

CVE-2020-24615

Summary: CVE-2020-24615 affects Pexip Infinity before version 24.1, due to improper input validation that can cause a temporary denial of service over SIP. Affected software (from provided docs): Pexip Infinity (video conferencing platform); versions prior to 24.1. Root cause (as stated): Imprope...

CVE-2024-37917

CVE-2024-37917 : Pexip Infinity prior to 35.0 is affected by improper input validation that allows a remote attacker to trigger a denial of service (software abort) via a crafted signalling message. This is the stated impact in multiple sources, with CVSS v3.1 indicating NETWORK access, low attac...

CVE-2023-31455

Pexip Infinity prior to version 31.2 is affected by an Improper Input Validation in RTCP handling. The root cause is improper validation of RTCP inputs, which allows remote attackers to trigger an abort. Affected product: Pexip Infinity (versions before 31.2). Impact as described: possibility to ...

CVE-2023-31289

CVE-2023-31289 affects Pexip Infinity prior to version 31.2. The root cause is improper input validation for signalling, allowing remote attackers to trigger a service abort. Impact is a potential denial of service. Remediation per available sources is to upgrade to version 31.2 or later or apply...

CVE-2025-66377

CVE-2025-66377 affects Pexip Infinity prior to 39.0. A missing authentication for a critical function in a product-internal API allows an attacker who already has code execution on one node to impact the operation of other nodes in the installation. This is not listed as exploitable in the provid...

CVE-2025-32095

Affected software: Pexip Infinity (before 37.0). Vulnerability detail: improper input validation in signalling allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in denial of service. This is consistently reported across CVE entries (NVD/Red Hat/EUVD/...

CVE-2025-66379

Pexip Infinity prior to 39.0 is affected by an improper input validation flaw in the media implementation. A remote attacker can exploit a crafted media stream to trigger a software abort, resulting in a denial of service. Affected product/version: Pexip Infinity