CVE-2026-103110

{
  "etk_id": "ETK-2026-76",
  "cve_id": "CVE-2026-103110",
  "display_id": "CVE-2026-103110",
  "ghsa_id": "GHSA-4qcw-c3r4-gc9h",
  "euvd_id": "EUVD-2026-89587",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper input validation in Pexip Infinity",
  "summary": "Pexip Infinity Conferencing Nodes are affected by improper input validation in releases before 38.2 and in 39.0, 39.1, and 40.0. An attacker able to reach an affected node remotely may execute code as an unprivileged user.",
  "mitigation": "Upgrade Pexip Infinity to version 38.2.0. Restrict remote access to Conferencing Nodes until the update is deployed.",
  "vendor": "Pexip",
  "product": "Infinity",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 38.2.0",
        "39.0.0",
        "39.1.0",
        "40.0.0"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "38.2.0"
      ],
      "package_name": "Infinity",
      "purl": null
    }
  ],
  "cwes": [
    787
  ],
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0061,
  "epss_percentile": 0.4815,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 63.56206435,
  "t0_at": "2026-09-30T03:03:07.449000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-09-30T03:03:07.449000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-09-30T03:03:07.449000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103110"
    }
  }
}