# Pexip Infinity vulnerabilities

Source: https://junglewise.ai/threats/technologies/infinity  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/infinity.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 19 vulnerabilities in Pexip Infinity: 0 in the last 7 days and 10 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-103110, was published on 30 September 2026. Nothing in the last four weeks, down from 10 vulnerabilities in the four before. 0 critical against 1.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 10
- All time: 19 (1 critical, 0 exploited in the wild)

## About Pexip Infinity

Infinity is a video conferencing and collaboration service provided by Pexip.

## Latest Pexip Infinity vulnerabilities

- [CVE-2026-103110: Pexip Infinity remote code execution via improper input validation](https://junglewise.ai/threats/cve-2026-103110-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected) (critical, CVSS 9.8, published 30 Sep 2026)
- [CVE-2026-103109: Pexip Infinity input validation in media implementation denial of service](https://junglewise.ai/threats/cve-2026-103109-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected) (high, CVSS 7.7, published 30 Sep 2026)
- [CVE-2026-103108: Pexip Infinity improper input validation in media implementation](https://junglewise.ai/threats/cve-2026-103108-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected) (high, CVSS 7.5, published 30 Sep 2026)
- [CVE-2026-103106: Pexip Infinity privilege escalation in internal service](https://junglewise.ai/threats/cve-2026-103106-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected) (high, CVSS 7.8, published 30 Sep 2026)
- [CVE-2026-103105: Pexip Infinity improper access control on internal API](https://junglewise.ai/threats/cve-2026-103105-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected) (high, CVSS 8.8, published 30 Sep 2026)
- [CVE-2026-103104: Pexip Infinity improper input validation in media implementation](https://junglewise.ai/threats/cve-2026-103104-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected) (high, CVSS 7.5, published 30 Sep 2026)
- [CVE-2026-103102: Pexip Infinity improper input validation in signaling](https://junglewise.ai/threats/cve-2026-103102-pexip-infinity-before-41-0-is-affected-by-improper-input) (high, CVSS 8.6, published 30 Sep 2026)
- [CVE-2026-103101: Pexip Infinity input validation improper in web server](https://junglewise.ai/threats/cve-2026-103101-pexip-infinity-30-0-through-40-x-before-41-0-is-affected-by) (high, CVSS 8.6, published 30 Sep 2026)
- [CVE-2026-103100: Pexip Infinity improper input validation in signaling](https://junglewise.ai/threats/cve-2026-103100-pexip-infinity-before-40-1-is-affected-by-improper-input) (high, CVSS 7.5, published 30 Sep 2026)
- [CVE-2026-103099: Pexip Infinity improper input validation in media implementation](https://junglewise.ai/threats/cve-2026-103099-pexip-infinity-before-41-1-is-affected-by-improper-input) (high, CVSS 7.5, published 30 Sep 2026)
- [CVE-2025-66443: Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has…](https://junglewise.ai/threats/cve-2025-66443-pexip-infinity-35-0-through-38-1-before-39-0-in-non-default) (high, CVSS 7.5, published 25 Dec 2025)
- [CVE-2025-66379: Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to…](https://junglewise.ai/threats/cve-2025-66379-pexip-infinity-before-39-0-has-improper-input-validation-in-the) (high, CVSS 7.5, published 25 Dec 2025)
- [CVE-2025-66378: Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an…](https://junglewise.ai/threats/cve-2025-66378-pexip-infinity-38-0-and-38-1-before-39-0-has-insufficient-access) (medium, CVSS 5.9, published 25 Dec 2025)
- [CVE-2025-66377: Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an…](https://junglewise.ai/threats/cve-2025-66377-pexip-infinity-before-39-0-has-missing-authentication-for-a) (high, CVSS 7.5, published 25 Dec 2025)
- [CVE-2025-59683: Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service…](https://junglewise.ai/threats/cve-2025-59683-pexip-infinity-15-0-through-38-0-before-38-1-has-improper-access) (high, CVSS 8.2, published 25 Dec 2025)
- [CVE-2025-49088: Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest…](https://junglewise.ai/threats/cve-2025-49088-pexip-infinity-32-0-through-37-1-before-37-2-in-certain) (medium, CVSS 5.9, published 25 Dec 2025)
- [CVE-2025-48704: Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to…](https://junglewise.ai/threats/cve-2025-48704-pexip-infinity-35-0-through-37-2-before-38-0-has-improper-input) (high, CVSS 7.5, published 25 Dec 2025)
- [CVE-2025-32096: Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to…](https://junglewise.ai/threats/cve-2025-32096-pexip-infinity-33-0-through-37-0-before-37-1-has-improper-input) (high, CVSS 7.5, published 25 Dec 2025)
- [CVE-2025-32095: Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a…](https://junglewise.ai/threats/cve-2025-32095-pexip-infinity-before-37-0-has-improper-input-validation-in) (high, CVSS 7.5, published 25 Dec 2025)

## Most severe Pexip Infinity vulnerabilities

- [CVE-2026-103110: Pexip Infinity remote code execution via improper input validation](https://junglewise.ai/threats/cve-2026-103110-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected) (critical, CVSS 9.8, published 30 Sep 2026)
- [CVE-2026-103105: Pexip Infinity improper access control on internal API](https://junglewise.ai/threats/cve-2026-103105-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected) (high, CVSS 8.8, published 30 Sep 2026)
- [CVE-2026-103102: Pexip Infinity improper input validation in signaling](https://junglewise.ai/threats/cve-2026-103102-pexip-infinity-before-41-0-is-affected-by-improper-input) (high, CVSS 8.6, published 30 Sep 2026)
- [CVE-2026-103101: Pexip Infinity input validation improper in web server](https://junglewise.ai/threats/cve-2026-103101-pexip-infinity-30-0-through-40-x-before-41-0-is-affected-by) (high, CVSS 8.6, published 30 Sep 2026)
- [CVE-2025-59683: Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service…](https://junglewise.ai/threats/cve-2025-59683-pexip-infinity-15-0-through-38-0-before-38-1-has-improper-access) (high, CVSS 8.2, published 25 Dec 2025)
- [CVE-2026-103106: Pexip Infinity privilege escalation in internal service](https://junglewise.ai/threats/cve-2026-103106-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected) (high, CVSS 7.8, published 30 Sep 2026)
- [CVE-2026-103109: Pexip Infinity input validation in media implementation denial of service](https://junglewise.ai/threats/cve-2026-103109-pexip-infinity-before-38-2-plus-39-0-39-1-and-40-0-is-affected) (high, CVSS 7.7, published 30 Sep 2026)
- [CVE-2025-32095: Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a…](https://junglewise.ai/threats/cve-2025-32095-pexip-infinity-before-37-0-has-improper-input-validation-in) (high, CVSS 7.5, published 25 Dec 2025)
- [CVE-2025-66379: Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to…](https://junglewise.ai/threats/cve-2025-66379-pexip-infinity-before-39-0-has-improper-input-validation-in-the) (high, CVSS 7.5, published 25 Dec 2025)
- [CVE-2025-66443: Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has…](https://junglewise.ai/threats/cve-2025-66443-pexip-infinity-35-0-through-38-1-before-39-0-in-non-default) (high, CVSS 7.5, published 25 Dec 2025)

## Vulnerabilities per week

Nothing in the last four weeks, down from 10 vulnerabilities in the four before. 0 critical against 1.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 10 | 1 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Pexip Infinity vulnerabilities", https://junglewise.ai/threats/technologies/infinity, 9 November 2026.