CVE-2026-103109
Quick assessment
Affected
Pexip Infinity
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Pexip Infinity 在 38.2 之前的版本，以及 39.0、39.1 和 40.0 版本，受媒体实现中不当输入验证漏洞的影响。该漏洞允许远程攻击者触发内存损坏或软件中止，从而导致拒绝服务（DoS）攻击。经过特制的媒体流在处理过程中可能导致受控中止，并有可能造成内存损坏。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-103109
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a denial of service. A crafted media stream may result in a controlled abort during processing, and has the potential to achieve memory corruption.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-103109
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-103109
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-103109 (1)
Same Patch Batch · Pexip · 2026-09-30 · 10 CVEs total
| CVE-2026-103110 | 9.8 CRITICAL | Pexip Infinity 40.0前远程代码执行漏洞 |
| CVE-2026-103105 | 8.8 HIGH | Pexip Infinity 40.0前版本本地API访问控制不当 |
| CVE-2026-103101 | 8.6 HIGH | Pexip Infinity 41.0前输入验证致服务不可用 |
| CVE-2026-103102 | 8.6 HIGH | Pexip Infinity 41.0前输入验证致拒绝服务 |
| CVE-2026-103106 | 7.8 HIGH | Pexip Infinity 40.0前版本本地权限提升至root漏洞 |
| CVE-2026-103099 | 7.5 HIGH | Pexip Infinity 41.1前输入验证不当致拒绝服务 |
| CVE-2026-103104 | 7.5 HIGH | Pexip Infinity 40.0前输入验证不当致拒绝服务 |
| CVE-2026-103100 | 7.5 HIGH | Pexip Infinity 40.1前输入验证不当致拒绝服务 |
| CVE-2026-103108 | 7.5 HIGH | Pexip Infinity 40.0前媒体输入验证致拒绝服务 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-103109
No comments yet