Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Pexip

First CVE: Feb 3, 2015Active for: 11 yearsTotal CVEs: 55
45.8
VTI Score
High

Pexip develops a narrow portfolio of real-time communication and video conferencing infrastructure products, including Pexip Infinity and its associated meeting-room and proxy components, which serve as critical backbone systems for enterprise unified communications. Vulnerabilities affecting the vendor skew toward serious outcomes, with a meaningful share reaching critical severity, and tend to cluster around input-validation weaknesses, resource-exhaustion conditions, and assertion failures that are characteristic of protocol-parsing and session-management code in conferencing platforms. The exposure pattern reflects the vendor's role as a trusted intermediary in media and signaling flows, where both authenticated and unauthenticated attack surfaces create recurring opportunities for denial-of-service and bypass conditions. Defenders should prioritize patches for internet-exposed or trusted-network instances of Pexip Infinity and monitor for session-disruption anomalies; current exploitation activity and severity counts are shown alongside this summary.

FAUCET AI Generated
55
Total CVEs
More Total CVEs than 99% of tracked vendors
1.4
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 76% of tracked vendors
7.4
Avg CVSS Score
Higher Avg CVSS Score than 56% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Pexip over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 3, 2015
11 years ago
Most Recent CVE
Dec 25, 2025
211 days ago

Products(5 total)

Top CVEs

Signals from CVEs in this vendor scope (55 CVEs).

55 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2017-6551CRITICAL
Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors related to Conferencing Nodes.
May 2, 20179.833NONO
CVE-2021-29656CRITICAL
Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked.
Feb 18, 20229.831NONO
CVE-2020-11805CRITICAL
Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN.
Sep 25, 20209.831NONO
CVE-2015-4719CRITICAL
The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request.
Sep 24, 20209.830NONO
CVE-2021-29655CRITICAL
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute.
Feb 18, 20229.829NONO
CVE-2025-59683CRITICAL
Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, when used with Office 365 Legacy Exchange Tokens. This allows
Dec 25, 20259.128NONO
CVE-2025-66377HIGH
Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access to execute code on one node wi
Dec 25, 20257.526NONO
CVE-2022-26656HIGH
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join.
Jul 17, 20228.226NONO
CVE-2025-48704HIGH
Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trigger a software abort, resulting in a denial of service.
Dec 25, 20257.525NONO
CVE-2025-32096HIGH
Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigger a software abort, resulting in a denial of service.
Dec 25, 20257.525NONO
View all 55 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products55 CVEs
16%
73%
11%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network52 (94.5%)
Unknown1 (1.8%)
Physical1 (1.8%)
Adjacent Network1 (1.8%)
Attack Complexity
Low50 (90.9%)
High4 (7.3%)
Unknown1 (1.8%)
User Interaction
None51 (92.7%)
Unknown1 (1.8%)
Required3 (5.5%)
Privileges Required
Low0 (0.0%)
High2 (3.6%)
None52 (94.5%)
Unknown1 (1.8%)

Exploit Exposure

Signals from CVEs in this vendor scope (55 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Pexip.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Pexip — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Pexip's Products

View all 1 CNAs →

Top CWEs