Pexip Infinity Receives Batch of CVE Disclosures Across Multiple Versions
Sourced from 1 publication
- •VulDB disclosed nine CVEs affecting Pexip Infinity across varying version ranges, from 38.1.x up to 41.0.x depending on the specific vulnerability
- •Vulnerability types include input validation flaws in media and signaling components, an access control weakness in an internal API, and denial of service risks
- •A separate CVE-2026-102599 was disclosed for Engine.IO versions up to 6.6.9, covering a denial of service issue in transport upgrades
- •All VulDB entries recommend upgrading affected components but provide no severity ratings or exploitation details
- •No vendor advisory from Pexip or evidence of active exploitation has been published alongside these disclosures
Sources
CVE-2026-103109 Pexip Infinity Media input validation
Vuldb
CVE-2026-103101 Pexip Infinity Web Server input validation
Vuldb
CVE-2026-103105 Pexip Infinity Product-internal API access control
Vuldb
CVE-2026-103100 Pexip Infinity Signaling denial of service
Vuldb
CVE-2026-103102 Pexip Infinity Signaling input validation
Vuldb
CVE-2026-103104 Pexip Infinity Media input validation
Vuldb
CVE-2026-103099 Pexip Infinity Media input validation
Vuldb
CVE-2026-103106 Pexip Infinity Internal Service input validation
Vuldb
CVE-2026-103108 Pexip Infinity Media input validation
Vuldb
CVE-2026-102599 Engine.IO Transport Upgrade denial of service
Vuldb
Curated from 1 sources. Every summary is reviewed for accuracy, but may still contain errors. We always link to original sources for verification.
Related Stories
About Meridian
Meridian is a free daily newsletter delivering signal-scored news stories with forward-looking analysis every morning. Stories are scored across six criteria (global leverage, capital impact, temporal durability, career relevance, decision utility, and narrative clarity) then assigned to Big Signal, Core, or Quick tiers.
Get Meridian in your inbox
The stories that matter, every morning at 06:00.