עברית

Vulnerability Intelligence

CVE-2025-66378

High 7.5

Published
Last modified
NVD status
Analyzed

Description

Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node.

Affected products

pexip: pexip infinity

References1

Metrics

CVSS 3.1
7.5 HIGH Score source: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS — exploit probability
0% percentile: 17 · as of 11 November 2026
CWE
CWE-863

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.