CVE-2025-49088
- State
- Published
- Severity
- 5.9 Medium
- Published
- Dec 25, 2025
- Updated
- Dec 26, 2025
- Reserved
- May 30, 2025
Description
Pexip Infinity 32.0 through 37.1 before 37.2, in certain configurations of OTJ (One Touch Join) for Teams SIP Guest Join, has Improper Input Validation in the OTJ service, allowing a remote attacker to trigger a software abort via a crafted calendar invite, leading to a denial of service.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.9 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | mitre |
Weaknesses
- CWE-617 Reachable Assertion
Affected Products
| Product | Versions |
|---|---|
InfinityPexip |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.