agentprime: coturnEvery new CVE for coturn.https://agentprime.io/CVE-2026-104074: Coturn 4.10.0 Uninitialized Stack Memory Disclosure via ERROR-CODEhttps://agentprime.io/advisories/CVE-2026-104074/https://agentprime.io/advisories/CVE-2026-104074/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 14:29:45 GMTCVECVE-2026-68555: coturn: Chained mobility resumes allow authenticated remote memory exhaustionhttps://agentprime.io/advisories/CVE-2026-68555/https://agentprime.io/advisories/CVE-2026-68555/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:43:11 GMTCVECVE-2026-68552: Coturn: uint16_t truncation overflow in STUN message length causes TCP stream framing bypasshttps://agentprime.io/advisories/CVE-2026-68552/https://agentprime.io/advisories/CVE-2026-68552/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:39:14 GMTCVECVE-2026-68554: Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requestshttps://agentprime.io/advisories/CVE-2026-68554/https://agentprime.io/advisories/CVE-2026-68554/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:38:28 GMTCVECVE-2026-68553: Coturn: Format String Injection via TURN USERNAME/REALM into hiredis Redis Commandhttps://agentprime.io/advisories/CVE-2026-68553/https://agentprime.io/advisories/CVE-2026-68553/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:37:42 GMTCVECVE-2026-73216: coturn: mobility disconnects bypass allocation quotas and exhaust relay capacityhttps://agentprime.io/advisories/CVE-2026-73216/https://agentprime.io/advisories/CVE-2026-73216/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:39:46 GMTCVECVE-2026-73215: The coturn server can end in a state where it does not accept more requests with "even-port" enabled.https://agentprime.io/advisories/CVE-2026-73215/https://agentprime.io/advisories/CVE-2026-73215/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:38:07 GMTCVECVE-2026-73214: coturn allocates a full per-peer SSL/session before verifying the DTLS cookie, enabling source-spoofing/botnet state-exhaustion DoShttps://agentprime.io/advisories/CVE-2026-73214/https://agentprime.io/advisories/CVE-2026-73214/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:34:51 GMTCVECVE-2026-73213: Coturn: `addr_less_eq()` does a component-wise IPv6 comparison instead of a lexicographic one, letting an authenticated TURN client bypass `denied-peer-ip`/`allowed-peer-ip` IPv6 ranges (TURN-specifi…https://agentprime.io/advisories/CVE-2026-73213/https://agentprime.io/advisories/CVE-2026-73213/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:33:12 GMTCVECVE-2026-73212: coturn peer-IP ACL canonicalization & scope bypass on the RFC 6062 TCP CONNECT relay path → internal-network SSRF and proven internal root RCEhttps://agentprime.io/advisories/CVE-2026-73212/https://agentprime.io/advisories/CVE-2026-73212/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:31:43 GMTCVECVE-2026-65981: Coturn: MOBILITY-TICKET session-resume authorization bypass allows cross-user TURN allocation takeoverhttps://agentprime.io/advisories/CVE-2026-65981/https://agentprime.io/advisories/CVE-2026-65981/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 21:00:02 GMTCVECVE-2026-62959: Coturn: Pre-authentication heap memory disclosure in ACME redirect (`try_acme_redirect`)https://agentprime.io/advisories/CVE-2026-62959/https://agentprime.io/advisories/CVE-2026-62959/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 19:57:06 GMTCVECVE-2026-53450: Coturn: IPv4-mapped 127.0.0.1 bypasses default loopback peer protectionhttps://agentprime.io/advisories/CVE-2026-53450/https://agentprime.io/advisories/CVE-2026-53450/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 18:05:06 GMTCVECVE-2026-53449: Coturn: Arbitrary File Write via CLI psd Commandhttps://agentprime.io/advisories/CVE-2026-53449/https://agentprime.io/advisories/CVE-2026-53449/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 17:59:11 GMTCVECVE-2026-53448: Coturn: SQL Injection in HTTPS Admin Panel Delete Operationshttps://agentprime.io/advisories/CVE-2026-53448/https://agentprime.io/advisories/CVE-2026-53448/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 17:56:07 GMTCVECVE-2026-43994: Coturn: Stack buffer overflow in decode_oauth_token_gcm()https://agentprime.io/advisories/CVE-2026-43994/https://agentprime.io/advisories/CVE-2026-43994/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 19:44:46 GMTCVECVE-2026-43915: Coturn: Stored Cross-Site Scripting (XSS) in web-admin interface via TURN usernamehttps://agentprime.io/advisories/CVE-2026-43915/https://agentprime.io/advisories/CVE-2026-43915/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 19:33:42 GMTCVECVE-2026-40613: Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)https://agentprime.io/advisories/CVE-2026-40613/https://agentprime.io/advisories/CVE-2026-40613/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 18:00:53 GMTCVECVE-2026-27624: Coturn: IPv4-mapped IPv6 (::ffff:0:0/96) bypasses denied-peer-ip ACLhttps://agentprime.io/advisories/CVE-2026-27624/https://agentprime.io/advisories/CVE-2026-27624/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Feb 2026 04:04:17 GMTCVECVE-2025-69217: Coturn has unsafe nonce and relay port randomization due to weak random number generation.https://agentprime.io/advisories/CVE-2025-69217/https://agentprime.io/advisories/CVE-2025-69217/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Dec 2025 00:41:18 GMTCVECVE-2020-26262: Loopback bypass in Coturnhttps://agentprime.io/advisories/CVE-2020-26262/https://agentprime.io/advisories/CVE-2020-26262/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Jan 2021 18:15:17 GMTCVECVE-2020-4067: Improper Initialization in coturnhttps://agentprime.io/advisories/CVE-2020-4067/https://agentprime.io/advisories/CVE-2020-4067/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jun 2020 19:55:13 GMTCVECVE-2020-6061: CoTURN: An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web…https://agentprime.io/advisories/CVE-2020-6061/https://agentprime.io/advisories/CVE-2020-6061/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2020 18:27:20 GMTCVECVE-2020-6062: CoTURN: An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web…https://agentprime.io/advisories/CVE-2020-6062/https://agentprime.io/advisories/CVE-2020-6062/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2020 18:25:22 GMTCVE