CVE-2026-103110

Published: Sep 30, 2026Modified: Oct 5, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: MITRE (Secondary)

Description

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation that allows a remote attacker to execute code remotely as an unprivileged user on a Pexip Infinity Conferencing Node.

Affected (3)

Products: Pexip: Pexip Infinity

Pexip

1 product

Pexip Infinity

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Pexip Pexip Infinity	Before 38.2
Pexip Pexip Infinity	From 39.0 to 39.1
Pexip Pexip Infinity	Version 40.0

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://docs.pexip.com/admin/security_bulletins.htm

Source: cve@mitre.org

Vendor Advisory

Timeline

No history available yet.