Product by Talos
Talos coTURN
14 known vulnerabilities in Talos coTURN (Talos), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-4056 | Talos coTURN: SQL Injection | 9.1 | |
| Critical | CVE-2020-6061 | CoTURN: Out-of-Bounds Read | 7.0 | |
| High | CVE-2020-6062 | CoTURN: Denial of Service | 5.9 | |
| High | CVE-2026-40613 | Coturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64) | 7.5 | |
| High | CVE-2020-4067 | Improper Initialization in coturn | 7.0 | |
| Critical | CVE-2018-4059 | Talos coTURN: security vulnerability | 6.5 | |
| Critical | CVE-2026-43994 | Coturn: Stack buffer overflow in decode_oauth_token_gcm() | 8.1 | |
| High | CVE-2020-26262 | Loopback bypass in Coturn | 7.2 | |
| High | CVE-2026-53448 | Coturn: SQL Injection in HTTPS Admin Panel Delete Operations | 7.2 | |
| High | CVE-2018-4058 | Talos coTURN: security vulnerability | 7.7 | |
| High | CVE-2026-53450 | Coturn: IPv4-mapped 127.0.0.1 bypasses default loopback peer protection | 7.4 | |
| High | CVE-2026-27624 | Coturn: IPv4-mapped IPv6 (::ffff:0:0/96) bypasses denied-peer-ip ACL | 7.2 | |
| Medium | CVE-2026-53449 | Coturn: Arbitrary File Write via CLI psd Command | 6.0 | |
| Medium | CVE-2026-43915 | Coturn: Stored Cross-Site Scripting (XSS) in web-admin interface via TURN username | 5.4 |