https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:32:02.386256+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-03293 bdu:2020-03293 2026-10-03T01:32:02.389689+00:00 bdu:2020-03293 https://cve.radiocsirt.org/vuln/euvd-2026-177270 EUVD-2026-177270 2026-10-03T01:32:02.389721+00:00 EUVD-2026-177270 https://cve.radiocsirt.org/vuln/fkie_cve-2018-4056 fkie_cve-2018-4056 2026-10-03T01:32:02.389736+00:00

An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-c3pf-948r-8592 GHSA-c3pf-948r-8592 2026-10-03T01:32:02.389764+00:00

An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2018-4056 gsd-2018-4056 2026-10-03T01:32:02.389781+00:00 gsd-2018-4056 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-4056 UBUNTU-CVE-2018-4056 2026-10-03T01:32:02.389791+00:00

Affected: Ubuntu:16.04:LTS: coturn, Ubuntu:18.04:LTS: coturn

An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator web portal. An attacker can log in via the external interface of the TURN server to trigger this vulnerability.