CVE-2026-103102

HIGHCVSS 8.6

Description

Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client.

Timeline

Published:September 30th, 2026 3:16 AM

Last modified:October 5th, 2026 8:48 PM

CVSS Scoring

CVSS v3: 8.6 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected Software

From NVD CPE configuration data

Vendors

pexip

Products

pexip_infinity

Weaknesses (CWE)

CWE-770

References & Reports

Advisories, patches, and third-party reports

https://docs.pexip.com/admin/security_bulletins.htmVendor Advisory

Source: NIST NVD · Data may lag official sources by up to one minute