Back to Database
Status published
Medium
CVE-2025-49088
Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations...
Vulnerability Description
Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the OTJ service, allowing a remote attacker to trigger a software abort via a crafted calendar invite, leading to a denial of service.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-49088
Credits & Attribution
No credits recorded in the NVD database.
More from Pexip
View All →CVE-2025-66443
Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations...
High
7.5
CVE-2025-66379
Pexip Infinity before 39.0 has Improper Input Validation in the...
High
7.5
CVE-2025-66378
Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access...
Medium
5.9
CVE-2025-66377
Pexip Infinity before 39.0 has Missing Authentication for a Critical...
High
7.5
CVE-2025-59683
Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access...
High
8.2
Affected Vendor
Pexip
View all reports →Affected Software
Infinity
Vulnerable Versions:
32.0
Timeline
Official Publish:
December 25th, 2025
Last Modified:
December 26th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H