Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/01 8:17 p.m.•12 views

CVE-2026-100251

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP...

6.9CVSS0.00258EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/01 7:44 p.m.•38 views

CVE-2026-100251 Wormhole.app SSRF

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP...

6.9CVSS0.00258EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/01 7:44 p.m.•8 views

CVE-2026-100251

Versions of Wormhole.app deployed before 2026-08-22 are vulnerable to a server-side request forgery (SSRF) due to a misconfiguration in the coturn TURN server . The flaw arises because the application fails to properly restrict TCP relay peers , enabling an unauthenticated attacker to access inst...

6.9CVSS5.8AI score0.00258EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/01 7:44 p.m.•6 views

CVE-2026-100251 Wormhole.app SSRF

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP...

6.9CVSS5.8AI score0.00258EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•10 views

PT-2026-103979

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/01 12:00 a.m.•11 views

CVE-2026-100251: Server-Side Request Forgery (SSRF)

Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access instance metadata or to source TCP connections from the Wormhole relay's IP...

6.9CVSS5.8AI score0.00258EPSS
SaveExploits0References2
Fedora
Fedora
•added 2021/01/20 1:33 a.m.•65 views

[SECURITY] Fedora 33 Update: coturn-4.5.2-1.fc33

The Coturn TURN Server is a VoIP media traffic NAT traversal server and gat eway. It can be used as a general-purpose network traffic TURN server/gateway, to o. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relayin...

7.2CVSS7.1AI score0.01547EPSS
SaveExploits3
Rows per page
Query Builder