Infinity
This hub aggregates every CVE we track for Infinity, a product in the communications space. Use it to gauge the current risk picture and drill into individual advisories.
27
CVEs tracked
5
Critical
15
High
0
In CISA KEV
Severity distribution
HIGH15MEDIUM7CRITICAL5
Monthly trend
0
1
1
0
0
0
0
0
0
0
0
0
0
0
9
0
0
0
0
0
0
0
0
0
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Infinity.
- CVE-2025-66378Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node.5.9
- CVE-2025-66443Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improper Input Validation in signalling that allows an attacker to trigger a softwa...7.5
- CVE-2025-66379Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting in a denial of ser...7.5
- CVE-2025-66377Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access to execute code on one node within a Pexip Infi...7.5
- CVE-2025-59683Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, when used with Office 365 Legacy Exchange Tokens. This allows a remote attacke...8.2
- CVE-2025-49088Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the OTJ service, allowing a remote attacke...5.9
- CVE-2025-48704Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a denial of service.7.5
- CVE-2025-32095Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a software abort via a crafted signalling message, resulting in a denial of service.7.5
- CVE-2025-32096Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting in a denial of service.7.5
- CVE-2024-10716Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an XSS issue with search.5.9
- CVE-2024-10094Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code9.1
- CVE-2024-6702Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage.5.2
- CVE-2024-6701Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type.5.5
- CVE-2024-6700Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name.5.5
- CVE-2022-24083Password authentication bypass vulnerability for local accounts can be used to bypass local authentication checks.9.8
Product normalization is registry-driven with AI assist and human review. How it works