Pexip

A high-severity vulnerability, CVE-2026-103102, has been disclosed affecting Pexip Infinity versions before 41.0. The flaw stems from improper input validation in the signaling implementation, letting a remote attacker trigger a software abort and cause a denial of service. Exploitation requires access to a restricted component, and administrators are expected to update to version 41.0 to close the issue.

A high-severity vulnerability, CVE-2026-103101 with a CVSS score of 8.6, affects Pexip Infinity versions 30.0 through 40.x before 41.0. The flaw stems from improper input validation in the web server component and could allow a malicious attacker to render a Pexip Infinity node inaccessible, disrupting video conferencing services. Administrators are being urged to update to version 41.0 or later to close the gap.