CVE-2022-26656: Pexip Infinity

High severity, CVSS 8.2. EPSS: 1.1% chance of exploitation in the next 30 days.

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join.

Affected products

• Pexip Pexip Infinity: before 27.3 (fixed in 27.3)

Published 2022-07-17. Last modified 2026-06-17.