CVE-2026-103110

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code

Published: —
Last modified: —
Status: published
Known exploitation: Not listed in CISA KEV
Fix: Fixed in 38.2.0
Public exploit: None on Exploit-DB

CISA SSVC

Exploitation: none
Automatable: yes
Technical impact: total

Decision points from CISA's Vulnrichment, assessed — (SSVC 2.0.3).

Summary

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a Pexip Infinity Conferencing Node.

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code

Summary

Affected versions

References 1

docs.pexip.com