CVE-2026-73216

A flaw was found in coturn. An authenticated client can exploit a vulnerability in the shutdownclientconnection function, which prematurely releases bandwidth accounting during the first stage of closing a mobility-enabled allocation. This allows the client to bypass user and total quotas, leadin...

CVE-2026-73216

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...

UBUNTU-CVE-2026-73216

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...

EUVD-2026-56825

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...

PT-2026-70831

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.17.0 Description The shutdown client connection function in src/server/ns turn server.c prematurely calls dec quota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation...