CVE-2026-103100
Received Received - Intake

Improper Input Validation in Pexip Infinity

Vulnerability report for CVE-2026-103100, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: MITRE

Description

Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
pexip infinity to 40.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-617 The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a denial of service issue in Pexip Infinity before version 40.1 caused by improper input validation in the signaling implementation. A malicious attacker can exploit this to trigger a software abort, crashing the system.

Impact Analysis

The vulnerability allows an attacker to cause a denial of service by crashing the Pexip Infinity system, potentially disrupting communication services that rely on it.

Compliance Impact

The vulnerability causes a denial of service due to improper input validation in signaling, which could disrupt critical communication systems. This may impact compliance with GDPR by affecting data processing availability or HIPAA by interrupting healthcare communications, though specific regulatory impacts depend on deployment context.

Mitigation Strategies

Update Pexip Infinity to version 40.1 or later to address the improper input validation flaw that causes denial of service.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-103100. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart