CVE-2026-103104
Received Received - Intake

Improper Input Validation in Pexip Infinity

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: MITRE

Description
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-103104
EUVD
EUVD-2026-89580

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
pexip infinity to 38.2 (exc)
pexip infinity 39.0
pexip infinity 39.1
pexip infinity 40.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-617 The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a denial of service issue in Pexip Infinity software versions before 38.2, plus 39.0, 39.1, and 40.0. It occurs due to improper input validation in the media implementation, allowing a remote attacker to trigger a software abort.

Detection Guidance

This vulnerability involves improper input validation in Pexip Infinity's media implementation, leading to a denial of service. Detection requires checking the installed version of Pexip Infinity against vulnerable releases (before 38.2, 39.0, 39.1, or 40.0). Use system commands to inspect the software version and compare it with the affected versions.

Impact Analysis

A remote attacker could exploit this flaw to cause the Pexip Infinity system to crash, resulting in service disruption and downtime for users relying on the software.

Compliance Impact

This vulnerability causes a denial of service due to improper input validation in media handling, which could disrupt critical communication services. Such disruptions may impact compliance with regulations like GDPR (data processing integrity) and HIPAA (availability of healthcare systems), depending on the affected system's role in processing sensitive data.

Mitigation Strategies

Update Pexip Infinity to version 38.2 or later to address the improper input validation issue. If using versions 39.0, 39.1, or 40.0, apply the latest patches immediately.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-103104. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart