CVE-2026-103102

Katalog CVE

CVSS 8.6 · High EPSS 0,32%

Kerentanan Allocation of Resources Without Limits or Throttling pada pexip infinity. Skor CVSS 3.1 8.6 (High) menurut mitre.org.

Deskripsi (NVD)

Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client.

Rincian

Terbit di NVD

30 September 2026

Terakhir diubah

5 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

8.6 (High), sumber mitre.org
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 23,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.pexip.com/admin/security_bulletins.htm advisory vendor