CVE-2014-8779: Pexip Infinity

High severity, CVSS 7.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys.

Affected products

• Pexip Pexip Infinity: up to and including 7.0

Published 2015-02-03. Last modified 2026-06-17.