Denial of Service Vulnerability in Pexip Infinity by Pexip

CVE-2026-103102

What is CVE-2026-103102?

Pexip Infinity, prior to version 41.0, is susceptible to a vulnerability caused by inadequate input validation within its signaling implementation. This weakness allows remote attackers to exploit the system, potentially leading to a denial of service condition. To successfully trigger this issue, an attacker would need access to a gateway call initiated by a WebRTC or API client. It is crucial for users to upgrade to the latest version to mitigate this risk.

References