Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client.
References
| Link | Resource |
|---|---|
| https://docs.pexip.com/admin/security_bulletins.htm | Vendor Advisory |
Configurations
History
05 Oct 2026, 20:48
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:pexip:pexip_infinity:*:*:*:*:*:*:*:* | |
| References | () https://docs.pexip.com/admin/security_bulletins.htm - Vendor Advisory | |
| First Time |
Pexip pexip Infinity
Pexip |
30 Sep 2026, 03:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-30 03:16
Updated : 2026-10-05 20:48
NVD link : CVE-2026-103102
Mitre link : CVE-2026-103102
CVE.ORG link : CVE-2026-103102
JSON object : View
Products Affected
pexip
- pexip_infinity
CWE
CWE-770
Allocation of Resources Without Limits or Throttling