CVE-2026-103108
Received Received - Intake

Pexip Infinity Media Input Validation Flaw Leads to DoS

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: MITRE

Description
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-103108
EUVD
EUVD-2026-89584

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
pexip infinity to 38.2 (exc)
pexip infinity 39.0
pexip infinity 39.1
pexip infinity 40.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-617 The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a denial of service issue in Pexip Infinity software versions before 38.2, plus 39.0, 39.1, and 40.0. It occurs due to improper input validation in the media implementation, allowing a remote attacker to trigger a software abort.

Impact Analysis

The vulnerability can cause the Pexip Infinity system to crash or become unavailable, disrupting video conferencing and communication services. This leads to service outages and potential loss of connectivity for users relying on the system.

Compliance Impact

The vulnerability causes a denial of service due to improper input validation in media handling, which could disrupt critical communication services. This may impact compliance with GDPR by affecting data processing availability or HIPAA by interrupting healthcare communication systems.

Mitigation Strategies

Update Pexip Infinity to a version not affected by the vulnerability, specifically versions prior to 38.2 or versions 39.2 and later. The affected versions include 38.2, 39.0, 39.1, and 40.0.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-103108. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart