CVE-2026-72530: TrueConf Server
TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.
- Vendor
- TrueConf
- Product
- Server
- Vulnerability
- TrueConf Server Code Injection Vulnerability
- Date added
- Aug 20, 2026
- CISA due date (U.S. federal agencies)
- Sep 3, 2026
- Known ransomware campaign use
- Unknown
- Weakness (CWE)
- CWE-94
References
This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.
Last updated: · Catalog version 2026.10.02