Known Exploited Vulnerabilities August 20, 2026 · CISA KEV Catalog

CVE-2026-72530: True Conf Server Code Injection Vulnerability

TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-72530 TrueConf
Related: CVE-2026-72529: True Conf Server Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Aug 20, 2026
CVE-2026-3502: True Conf Client Download of Code Without Integrity Check Vulnerability Known Exploited Vulnerabilities · Apr 02, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026