Skip to content
Coturn Project Coturn vulnerabilities
-
coturn
Coturn: IPv4-mapped 127.0.0.1 bypasses default loopback peer protection
CVE-2026-53450
Fix available
7.4 High
-
coturn
Coturn: Arbitrary File Write via CLI psd Command
CVE-2026-53449
Fix available
6.0 Medium
-
coturn
Coturn: SQL Injection in HTTPS Admin Panel Delete Operations
CVE-2026-53448
Fix available
7.2 High
-
coturn
Coturn: Stack buffer overflow in decode_oauth_token_gcm()
CVE-2026-43994
Fix available
8.1 High
-
coturn
Coturn: Stored Cross-Site Scripting (XSS) in web-admin interface via TURN username
CVE-2026-43915
Fix available
5.4 Medium
-
coturn
Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)
CVE-2026-40613
Fix available
7.5 High
-
coturn
Coturn: IPv4-mapped IPv6 (::ffff:0:0/96) bypasses denied-peer-ip ACL
CVE-2026-27624
Fix available
7.2 High
-
coturn, fedoraproject fedora +1 more
Loopback bypass in Coturn
CVE-2020-26262
Fix available
7.2 High
-
coturn, canonical ubuntu linux, debian linux +2 more +4 more
Improper Initialization in coturn
CVE-2020-4067
Fix available
7.0 High
-
coturn, canonical ubuntu linux, debian linux +1 more +3 more
An exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1 web server parses...
CVE-2020-6061
Fix available
7.0 High
-
coturn, canonical ubuntu linux, debian linux +1 more +3 more
An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses...
CVE-2020-6062
Fix available
5.9 Medium
-
coturn
An exploitable unsafe default configuration vulnerability exists in the TURN server function of...
CVE-2018-4059
Fix available
6.5 Medium
-
coturn
An exploitable unsafe default configuration vulnerability exists in the TURN server functionality...
CVE-2018-4058
Fix available
7.7 High
-
coturn, debian linux +1 more
An exploitable SQL injection vulnerability exists in the administrator web portal function of...
CVE-2018-4056
Fix available
9.1 Critical