High (7.5). EPSS 6.1% chance of exploitation in the next 30 days.
An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to server crash and denial of service. An attacker needs to send an HTTP request to trigger this vulnerability.
Severity
CVSS 3.1
7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
6.1% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)