CVE-2023-40236: Pexip Virtual Meeting Rooms

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authentication bypass.

Affected products

• Pexip Virtual Meeting Rooms: before 3.0 (fixed in 3.0)

Published 2023-12-25. Last modified 2026-06-17.