CVE-2026-72529: TrueConf Server

TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.

Vendor: TrueConf
Product: Server
Vulnerability: TrueConf Server Missing Authentication for Critical Function Vulnerability
Date added: Aug 20, 2026
CISA due date (U.S. federal agencies): Aug 23, 2026
Known ransomware campaign use: Unknown
Weakness (CWE): CWE-306

References

NVD — CVE-2026-72529
trueconf.com
ics-cert.kaspersky.com
www.cisa.gov
www.cisa.gov
nvd.nist.gov

This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.

Last updated: Oct 4, 2026 17:31 UTC · Catalog version 2026.10.02