CVE-2026-103104CWE-617
CVE-2026-103104
High · published September 30, 2026
What it is
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00313 · 23.0th percentile
- Weakness
- CWE-617 · Reachable Assertion
- Published
- 2026-09-30T07:16Z
Affected products (3)
| Product | Versions | Fixed in |
|---|
| pexip/pexip_infinity | < 38.2 | 38.2 |
| pexip/pexip_infinity | ≥ 39.0, ≤ 39.1 | — |
| pexip/pexip_infinity | all versions | — |
References (1)
EPSS history
Timeline
01 OCT 03:44Z
EPSS moved — → 0%
epss
30 SEP 02:35Z
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to…
cvelistv5