Vulnerability record · CVE-2026-53448 · published 10 July 2026

CVE-2026-53448: Coturn project coturn sql injection vulnerability

Coturn Project · Coturn

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.12.0, the coturn HTTPS admin panel passes HTTP query parameters directly into SQL queries via snprintf string interpolation without sanitization. The is_secure_string filter that protects the STUN protocol path is not applied to the admin panel's delete-user, delete-secret, and delete-IP operations, so an authenticated admin can inject arbitrary SQL through the du, ds, and dip parameters, gaining full database control and potentially OS-level access via PostgreSQL COPY TO PROGRAM. This issue is fixed in version 4.12.0.

7.2 CVSS 3.1 High EPSS 0.70% · top 48.6% CWE-89 · SQL injection

7.2CVSS 3.1 base score

0.70%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

5References, 2 tagged exploit

16 Jul 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Coturn Coturn Project

References

Link	Tags
https://github.com/coturn/coturn/commit/b84dbab1d1aa6e2bf0211a1cdbb250d6de2a0d09	Patch
https://github.com/coturn/coturn/pull/1924	Issue TrackingPatch
https://github.com/coturn/coturn/releases/tag/4.12.0	Release Notes
https://github.com/coturn/coturn/security/advisories/GHSA-v8hj-2xx7-xmp5	ExploitVendor Advisory
https://github.com/coturn/coturn/security/advisories/GHSA-v8hj-2xx7-xmp5	ExploitVendor Advisory

Track CVE-2026-53448 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-43994Coturn project coturn classic buffer overflow vulnerabilityCoturn is a free open source implementation of TURN and STUN Server. Versions prior to 4.10.0 contain a stack buffer overflow in decode_oauth_token_g…EPSS 0.68%18 Jun 2026 9.8CVE-2020-6061Coturn project coturn out-of-bounds read vulnerabilityAn exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST …EPSS 5.1%19 Feb 2020 9.8CVE-2018-4059Coturn project coturn missing authorization vulnerabilityAn exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN…EPSS 1.9%21 Mar 2019 9.8CVE-2018-4056Coturn project coturn sql injection vulnerabilityAn exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a…EPSS 3.0%5 Feb 2019 7.7CVE-2018-4058Coturn project coturn vulnerabilityAn exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN se…EPSS 0.92%21 Mar 2019 7.5CVE-2026-40613Coturn project coturn vulnerabilityCoturn is a free open source implementation of TURN and STUN Server. Prior to 4.10.0, the STUN/TURN attribute parsing functions in coturn perform uns…EPSS 1.5%21 Apr 2026 7.5CVE-2020-4067Coturn project coturn vulnerabilityIn coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information bet…EPSS 1.9%29 Jun 2020 7.5CVE-2020-6062Coturn project coturn null pointer dereference vulnerabilityAn exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST reques…EPSS 6.1%19 Feb 2020

Source: NIST National Vulnerability Database (record CVE-2026-53448), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.