Known Exploited Vulnerabilities August 20, 2026 · CISA KEV Catalog

CVE-2026-72529: True Conf Server Missing Authentication for Critical Function Vulnerability

TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-72529 TrueConf
Related: CVE-2026-72530: True Conf Server Code Injection Vulnerability Known Exploited Vulnerabilities · Aug 20, 2026
CVE-2026-3502: True Conf Client Download of Code Without Integrity Check Vulnerability Known Exploited Vulnerabilities · Apr 02, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026