Pexip confirms 10 Infinity vulnerabilities, including critical remote code execution
Pexip Infinity
Pexip's official security bulletin matrix covers 10 Infinity vulnerabilities now published in NVD, including unauthenticated remote code execution on Conferencing Nodes (CVE-2026-103110), remote denial of service and memory corruption, local privilege escalation and cross-node code execution. The vendor's individual bulletin rows are dated July or August 2026; RoomWatch first discovered the complete set on September 30.
Inventory every Infinity Management and Conferencing Node, then move to 41.1 or later where possible. Organizations held on an older supported train should follow Pexip's exact fixed-version matrix and confirm the remediation path with support; CVE-2026-103099 requires 41.1 even though several other issues were fixed in 38.2, 39.2, 40.1 or 41.0.
Critical enterprise and government relevance for self-hosted conferencing infrastructure because the confirmed set includes unauthenticated remote code execution and multiple service-disruption paths