CVE-2026-103102: Pexip Infinity

High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client.

Affected products

• Pexip Pexip Infinity: before 41.0 (fixed in 41.0)

Published 2026-09-30. Last modified 2026-10-05.