P
exip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the OTJ service, allowing a remote attacker to trigger a software abort via a crafted calendar invite, leading to a denial of service.
References
| Link | Resource |
|---|---|
| https://docs.pexip.com/admin/security_bulletins.htm | Vendor Advisory |
Configurations
History
05 Jan 2026, 19:31
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Pexip
Pexip pexip Infinity |
|
| References | () https://docs.pexip.com/admin/security_bulletins.htm - Vendor Advisory | |
| CPE | cpe:2.3:a:pexip:pexip_infinity:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo |
25 Dec 2025, 05:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-25 05:16
Updated : 2026-01-05 19:31
NVD link : CVE-2025-49088
Mitre link : CVE-2025-49088
CVE.ORG link : CVE-2025-49088
JSON object : View
Products Affected
CWE