CVE-2024-38392

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remote attackers can cause the application to run untrusted code.

Published 2025-04-02. Last modified 2026-06-17.