CVE-2026-73212

🗓️ 21 Aug 2026 13:06:57Reported by redhat.comType

redhatcve🔗 access.redhat.com👁 4 Views

SSRF and potential RCE in Coturn via improper IPv4 address canonicalization in RFC 6062 relay path.

Reporter	Title	Published	Views	Family All 12
CVE	CVE-2026-73212	11 Aug 202617:31	–	cve
Cvelist	CVE-2026-73212 coturn peer-IP ACL canonicalization & scope bypass on the RFC 6062 TCP CONNECT relay path → internal-network SSRF and proven internal root RCE	11 Aug 202617:31	–	cvelist
Debian CVE	CVE-2026-73212	11 Aug 202617:31	–	debiancve
EUVD	EUVD-2026-56789	11 Aug 202617:31	–	euvd
NVD	CVE-2026-73212	11 Aug 202618:18	–	nvd
OSV	DEBIAN-CVE-2026-73212	11 Aug 202618:18	–	osv
OSV	UBUNTU-CVE-2026-73212	11 Aug 202618:18	–	osv
Positive Technologies	PT-2026-70799	11 Aug 202600:00	–	ptsecurity
SUSE CVE	SUSE CVE-2026-73212	14 Aug 202600:52	–	susecve
UbuntuCve	CVE-2026-73212	11 Aug 202618:18	–	ubuntucve

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-73212
github	www.github.com/coturn/coturn/commit/cf4b4952de48510d38415b96300da5fc674bfdda
github	www.github.com/coturn/coturn/commit/d49ee56aa9fe748af064853d5e430eec1ccc3cbc
github	www.github.com/coturn/coturn/pull/1945
github	www.github.com/coturn/coturn/pull/1947
github	www.github.com/coturn/coturn/releases/tag/4.13.1
github	www.github.com/coturn/coturn/security/advisories/GHSA-2x4g-wx24-48m4
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

21 Aug 2026 13:22Current

6.2Medium risk

Vulners AI Score6.2

CVSS 45.8

EPSS0.00282

SSVC

Coturn SSRF RCE address canonicalization RFC 6062 TCP CONNECT