CVE-2020-27611: Bigbluebutton

High severity, CVSS 7.3. EPSS: 0.7% chance of exploitation in the next 30 days.

BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint.

Affected products

• Bigbluebutton Bigbluebutton: up to and including 2.2.28

Published 2020-10-21. Last modified 2026-06-17.