CVEs (57)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP. |
Pexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a conference (call join) if it has a lock but not a PIN. |
Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service. |
Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface. |
Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote attacker can trigger a software abort (temporary loss of service). |
Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP. |
Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323. |
Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP. |
1Pexip 2Pexip Infinity Reverse Proxy And Turn ServerJun 17, 2026 Sep 25, 2020 N/A· v4 9.8 CRITICAL· v3 9.3 HIGH· v2 Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN. |
Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup. |
Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin. |
Pexip Infinity before 18 allows remote Denial of Service (XML parsing). |
Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP). |
Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views. |
The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request. |
Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Conferencing Nodes. |
Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys. |