CVE-2026-73216

CVE-2026-73216 affects Coturn (TURN/STUN server). Before 4.17.0, shutdown_client_connection() in src/server/ns_turn_server.c prematurely calls dec_quota() and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation, while preserving allocation, relay socket, se...