CVE-2026-103108

Published: Sep 30, 2026Modified: Oct 5, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: MITRE (Secondary)

Description

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of service

Affected (3)

Products: Pexip: Pexip Infinity

Pexip

1 product

Pexip Infinity

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Pexip Pexip Infinity	Before 38.2
Pexip Pexip Infinity	From 39.0 to 39.1
Pexip Pexip Infinity	Version 40.0

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (1)

https://docs.pexip.com/admin/security_bulletins.htm

Source: cve@mitre.org

Vendor Advisory

Timeline

No history available yet.