Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service.

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-103104 · Microsoft / collected KEV context

cve-program · CVE-2026-103104

• https://docs.pexip.com/admin/security_bulletins.htm

No related operational record is retained in the current change model.