Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-103104

Pexip Infinity: denial of service

Risk score
55/100
CVSS
7.5 v3.1
Exploit chance (30 days)
0.3%
Published
30 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service.
Affected
Pexip Infinity before 38.2
Fix
Upgrade Pexip Infinity to 38.2 or later.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 7.5 high
  • Remotely exploitable without logging in

References

Original description

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service.

Last activity 30 Sep 2026. Patch Forecast updates every hour.