{"schema_version":1,"title":"Pexip Infinity vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 19 vulnerabilities in Pexip Infinity: 0 in the last 7 days and 10 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-103110, was published on 30 September 2026. Nothing in the last four weeks, down from 10 vulnerabilities in the four before. 0 critical against 1.","url":"https://junglewise.ai/threats/technologies/infinity","json_url":"https://junglewise.ai/threats/technologies/infinity.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/infinity","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":16,"all_time":19,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":10,"last_365_days":19},"latest":[{"cve":"CVE-2026-103110","cvss":9.8,"slug":"cve-2026-103110-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected","title":"Pexip Infinity remote code execution via improper input validation","severity":"critical","exploited":false,"published_at":"2026-09-30T04:18:29.077+00:00","url":"https://junglewise.ai/threats/cve-2026-103110-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected"},{"cve":"CVE-2026-103109","cvss":7.7,"slug":"cve-2026-103109-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected","title":"Pexip Infinity input validation in media implementation denial of service","severity":"high","exploited":false,"published_at":"2026-09-30T03:17:00.073+00:00","url":"https://junglewise.ai/threats/cve-2026-103109-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected"},{"cve":"CVE-2026-103108","cvss":7.5,"slug":"cve-2026-103108-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected","title":"Pexip Infinity improper input validation in media implementation","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:59.92+00:00","url":"https://junglewise.ai/threats/cve-2026-103108-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected"},{"cve":"CVE-2026-103106","cvss":7.8,"slug":"cve-2026-103106-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected","title":"Pexip Infinity privilege escalation in internal service","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:59.773+00:00","url":"https://junglewise.ai/threats/cve-2026-103106-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected"},{"cve":"CVE-2026-103105","cvss":8.8,"slug":"cve-2026-103105-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected","title":"Pexip Infinity improper access control on internal API","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:59.623+00:00","url":"https://junglewise.ai/threats/cve-2026-103105-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected"},{"cve":"CVE-2026-103104","cvss":7.5,"slug":"cve-2026-103104-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected","title":"Pexip Infinity improper input validation in media implementation","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:59.467+00:00","url":"https://junglewise.ai/threats/cve-2026-103104-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected"},{"cve":"CVE-2026-103102","cvss":8.6,"slug":"cve-2026-103102-pexip-infinity-before-41-0-is-affected-by-improper-input","title":"Pexip Infinity improper input validation in signaling","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:59.307+00:00","url":"https://junglewise.ai/threats/cve-2026-103102-pexip-infinity-before-41-0-is-affected-by-improper-input"},{"cve":"CVE-2026-103101","cvss":8.6,"slug":"cve-2026-103101-pexip-infinity-30-0-through-40-x-before-41-0-is-affected-by","title":"Pexip Infinity input validation improper in web server","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:59.033+00:00","url":"https://junglewise.ai/threats/cve-2026-103101-pexip-infinity-30-0-through-40-x-before-41-0-is-affected-by"},{"cve":"CVE-2026-103100","cvss":7.5,"slug":"cve-2026-103100-pexip-infinity-before-40-1-is-affected-by-improper-input","title":"Pexip Infinity improper input validation in signaling","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:58.87+00:00","url":"https://junglewise.ai/threats/cve-2026-103100-pexip-infinity-before-40-1-is-affected-by-improper-input"},{"cve":"CVE-2026-103099","cvss":7.5,"slug":"cve-2026-103099-pexip-infinity-before-41-1-is-affected-by-improper-input","title":"Pexip Infinity improper input validation in media implementation","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:58.717+00:00","url":"https://junglewise.ai/threats/cve-2026-103099-pexip-infinity-before-41-1-is-affected-by-improper-input"},{"cve":"CVE-2025-66443","cvss":7.5,"epss":0.0031,"slug":"cve-2025-66443-pexip-infinity-35-0-through-38-1-before-39-0-in-non-default","title":"Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:09.803+00:00","url":"https://junglewise.ai/threats/cve-2025-66443-pexip-infinity-35-0-through-38-1-before-39-0-in-non-default"},{"cve":"CVE-2025-66379","cvss":7.5,"epss":0.0037,"slug":"cve-2025-66379-pexip-infinity-before-39-0-has-improper-input-validation-in-the","title":"Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:09.603+00:00","url":"https://junglewise.ai/threats/cve-2025-66379-pexip-infinity-before-39-0-has-improper-input-validation-in-the"},{"cve":"CVE-2025-66378","cvss":5.9,"epss":0.0025,"slug":"cve-2025-66378-pexip-infinity-38-0-and-38-1-before-39-0-has-insufficient-access","title":"Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an…","severity":"medium","exploited":false,"published_at":"2025-12-25T05:16:09.43+00:00","url":"https://junglewise.ai/threats/cve-2025-66378-pexip-infinity-38-0-and-38-1-before-39-0-has-insufficient-access"},{"cve":"CVE-2025-66377","cvss":7.5,"epss":0.0021,"slug":"cve-2025-66377-pexip-infinity-before-39-0-has-missing-authentication-for-a","title":"Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:09.197+00:00","url":"https://junglewise.ai/threats/cve-2025-66377-pexip-infinity-before-39-0-has-missing-authentication-for-a"},{"cve":"CVE-2025-59683","cvss":8.2,"epss":0.0033,"slug":"cve-2025-59683-pexip-infinity-15-0-through-38-0-before-38-1-has-improper-access","title":"Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:07.9+00:00","url":"https://junglewise.ai/threats/cve-2025-59683-pexip-infinity-15-0-through-38-0-before-38-1-has-improper-access"},{"cve":"CVE-2025-49088","cvss":5.9,"epss":0.0032,"slug":"cve-2025-49088-pexip-infinity-32-0-through-37-1-before-37-2-in-certain","title":"Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest…","severity":"medium","exploited":false,"published_at":"2025-12-25T05:16:07.42+00:00","url":"https://junglewise.ai/threats/cve-2025-49088-pexip-infinity-32-0-through-37-1-before-37-2-in-certain"},{"cve":"CVE-2025-48704","cvss":7.5,"epss":0.0031,"slug":"cve-2025-48704-pexip-infinity-35-0-through-37-2-before-38-0-has-improper-input","title":"Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:07.237+00:00","url":"https://junglewise.ai/threats/cve-2025-48704-pexip-infinity-35-0-through-37-2-before-38-0-has-improper-input"},{"cve":"CVE-2025-32096","cvss":7.5,"epss":0.0031,"slug":"cve-2025-32096-pexip-infinity-33-0-through-37-0-before-37-1-has-improper-input","title":"Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:07.057+00:00","url":"https://junglewise.ai/threats/cve-2025-32096-pexip-infinity-33-0-through-37-0-before-37-1-has-improper-input"},{"cve":"CVE-2025-32095","cvss":7.5,"epss":0.0042,"slug":"cve-2025-32095-pexip-infinity-before-37-0-has-improper-input-validation-in","title":"Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:06.857+00:00","url":"https://junglewise.ai/threats/cve-2025-32095-pexip-infinity-before-37-0-has-improper-input-validation-in"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":1,"exploited":0,"vulnerabilities":10},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Pexip Infinity","slug":"infinity","vendor":{"hub":true,"name":"Pexip","slug":"pexip","url":"https://junglewise.ai/threats/vendors/pexip"},"aliases":["pexip-infinity"],"category":"service","description":"Infinity is a video conferencing and collaboration service provided by Pexip.","url":"https://junglewise.ai/threats/technologies/infinity"},"most_severe":[{"cve":"CVE-2026-103110","cvss":9.8,"slug":"cve-2026-103110-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected","title":"Pexip Infinity remote code execution via improper input validation","severity":"critical","exploited":false,"published_at":"2026-09-30T04:18:29.077+00:00","url":"https://junglewise.ai/threats/cve-2026-103110-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected"},{"cve":"CVE-2026-103105","cvss":8.8,"slug":"cve-2026-103105-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected","title":"Pexip Infinity improper access control on internal API","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:59.623+00:00","url":"https://junglewise.ai/threats/cve-2026-103105-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected"},{"cve":"CVE-2026-103102","cvss":8.6,"slug":"cve-2026-103102-pexip-infinity-before-41-0-is-affected-by-improper-input","title":"Pexip Infinity improper input validation in signaling","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:59.307+00:00","url":"https://junglewise.ai/threats/cve-2026-103102-pexip-infinity-before-41-0-is-affected-by-improper-input"},{"cve":"CVE-2026-103101","cvss":8.6,"slug":"cve-2026-103101-pexip-infinity-30-0-through-40-x-before-41-0-is-affected-by","title":"Pexip Infinity input validation improper in web server","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:59.033+00:00","url":"https://junglewise.ai/threats/cve-2026-103101-pexip-infinity-30-0-through-40-x-before-41-0-is-affected-by"},{"cve":"CVE-2025-59683","cvss":8.2,"epss":0.0033,"slug":"cve-2025-59683-pexip-infinity-15-0-through-38-0-before-38-1-has-improper-access","title":"Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:07.9+00:00","url":"https://junglewise.ai/threats/cve-2025-59683-pexip-infinity-15-0-through-38-0-before-38-1-has-improper-access"},{"cve":"CVE-2026-103106","cvss":7.8,"slug":"cve-2026-103106-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected","title":"Pexip Infinity privilege escalation in internal service","severity":"high","exploited":false,"published_at":"2026-09-30T03:16:59.773+00:00","url":"https://junglewise.ai/threats/cve-2026-103106-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected"},{"cve":"CVE-2026-103109","cvss":7.7,"slug":"cve-2026-103109-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected","title":"Pexip Infinity input validation in media implementation denial of service","severity":"high","exploited":false,"published_at":"2026-09-30T03:17:00.073+00:00","url":"https://junglewise.ai/threats/cve-2026-103109-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected"},{"cve":"CVE-2025-32095","cvss":7.5,"epss":0.0042,"slug":"cve-2025-32095-pexip-infinity-before-37-0-has-improper-input-validation-in","title":"Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:06.857+00:00","url":"https://junglewise.ai/threats/cve-2025-32095-pexip-infinity-before-37-0-has-improper-input-validation-in"},{"cve":"CVE-2025-66379","cvss":7.5,"epss":0.0037,"slug":"cve-2025-66379-pexip-infinity-before-39-0-has-improper-input-validation-in-the","title":"Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:09.603+00:00","url":"https://junglewise.ai/threats/cve-2025-66379-pexip-infinity-before-39-0-has-improper-input-validation-in-the"},{"cve":"CVE-2025-66443","cvss":7.5,"epss":0.0031,"slug":"cve-2025-66443-pexip-infinity-35-0-through-38-1-before-39-0-in-non-default","title":"Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has…","severity":"high","exploited":false,"published_at":"2025-12-25T05:16:09.803+00:00","url":"https://junglewise.ai/threats/cve-2025-66443-pexip-infinity-35-0-through-38-1-before-39-0-in-non-default"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}