Skip to content
November 12, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • ADVISORIES
    • Microsoft
    • Fortinet
    • Ivanti
    • Cisco
    • Linux
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q3 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
  • Home
  • Technique
  • STUN vs. TURN Servers in WebRTC
  • Technique

STUN vs. TURN Servers in WebRTC

Do Son October 30, 2022 5 minutes read
WebRTC bug

Video calling technology has taken over the world, and people can see and hear each other via the Internet in a matter of seconds if they want to. Previously, users had to download programs and install them on their devices to use video conferencing services. Not to mention the era when the software was stored and shared on disks. But now, there are dedicated video conferencing platforms that allow peer-to-peer communication almost instantly. This is possible thanks to WebRTC technology. For users, it might look like the connection just happens, but many special servers are working for two people to speak to each other online in real-time. Digital Samba (https://www.digitalsamba.com/video-api) is one of the platforms that allow such simple communication.

Servers Needed for P2P Communication

WebRTC, to put it simply, is a connection established between two different browsers. It is the most simple connection as it only features two people. However, with video conferencing platforms, thousands of people can communicate within one digital call simultaneously. But the smallest connection between two Internet users is a good example. To bring these two people together, it is necessary to establish a connection with the server. A server does the coordination necessary for the video connection to work. At this stage, two types of servers can be used: STUN or TURN.

About STUN Servers

To communicate online in real time and use video, audio, and file sharing in the process, it is necessary to connect to a specific server. Both Session Traversal Utilities for NAT or STUN and Traversal Using Relays around NAT or TURN servers are incorporated in the process of digital peer-to-peer communication. However, they are utilized on different occasions.

Before the connection between the two video conferencing platform users can be established, a server needs to identify the IPs of both users. The software using WebRTC usually works with STUN servers. They are fast, easy to use, and do not generate much traffic.

When the connection between two users happens, they can easily exchange data directly with each other. However, in some cases, firewalls prohibit the software from connecting to the STUN servers. That is why TURN servers are used as an alternative.

About TURN Servers

Because of a firewall or other limitations, access to a certain server can be limited. Because there are no identifiers that would help two devices to discover each other and connect, another solution is necessary. It is when TURN servers come into play. However, when a TURN server helps to finally connect the two dots, it remains in the way of data exchange, unlike a STUN server. This usually results in slower operation, which is a price you have to pay for establishing a connection when the other option does not work out. This also often means increased expenses.

Although TURN servers are slower and more expensive, they can save your connection if STUN servers cannot be used. In any case, a connection between two or more people is established, and it becomes possible to communicate via a video call live.

Benefits of Video Conferencing

Being able to communicate over the Internet in real-time and not only hear but also see the people you are talking to is a great invention. In addition, modern video conferencing software opens up new opportunities for collaboration, which allows for convenient and efficient work and studying. Software like Digital Samba is extremely useful and safe thanks to its encryption methods called E2EE. It is GDPR-compliant as well, which contributes to its security. Here are some of the reasons why you should consider video conferencing services:

  • Easier communication – previously, remote work and even working in the office were not very convenient in many cases. Communicating via the phone made it impossible to see the other person, and sharing files or ideas was more difficult. With video conferencing, you can connect with your colleagues easily from any point on the planet.
  • Cutting costs – hosting a conference for many employees of a company often requires traveling to a certain destination. If your company has offices in different cities or even countries, it is rather difficult and costly to bring people together. Video calls are incredibly affordable and handy when it comes to arranging a meeting for people from all across the world.
  • Increased efficiency – convenient conditions and tools for collaboration result in enhanced efficiency. When your employees can jump on a video call within seconds to discuss certain questions and ask for advice, their workflow becomes much more smooth and brings better results.
  • Affordable – even if you want to have a dedicated video conference room with all the necessary equipment, it is cost-efficient as high-quality hardware and software will serve for many years. However, you do not even need extremely expensive equipment for video conferencing. A simple laptop or even a smartphone will work just fine.
  • Recording videos – whether you need to record your meeting for the archive or you want to create a series of live workshops and upload them on your site afterward, this is possible with video calling software. Simply start recording at the beginning of your live stream session and store the full video in a cloud afterward. Cloud storage is especially convenient for such large videos as you will not need to store all the files within the company.
  • Host video conferences of any scale – from a face-to-face video chat with a colleague to a live stream for your clients with thousands of attendees, video conferencing solutions are very scalable and can suit any of your corporate needs. Host a variety of events or meetings using a single software.

Video conferencing technology has come a long way, and modern servers allow connecting with other users easily within seconds.

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-107935CVSS 9.3
    A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated...
    📅 Updated: Nov 12, 2026
  • CVE-2026-125883CVSS 9.3
    Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning. This issue affects...
    📅 Updated: Nov 12, 2026
  • CVE-2026-76954CVSS 9.8
    An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology...
    📅 Updated: Nov 12, 2026
  • CVE-2026-126785CVSS 9.3
    A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub_11504 in the library...
    📅 Updated: Nov 12, 2026
  • CVE-2022-23851CVSS 9.8
    Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI).
    📅 Updated: Nov 11, 2026
  • CVE-2026-30530CVSS 9.8
    A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the...
    📅 Updated: Nov 11, 2026
  • CVE-2026-34873CVSS 9.1
    An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS...
    📅 Updated: Nov 11, 2026
  • CVE-2026-36235CVSS 9.8
    A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0. The...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About Daily CyberSecurity
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DMCA
  • Privacy Policy

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.