THREATOPS

THREAT OPS › CVEs › CVE-2026-72529

CVE-2026-72529 — TrueConf Server Missing Authentication for Critical Function Vulnerability

CISA KEVExploited: confirmedTrueConf

TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.

Vulnerability details

Affected productsServer
KEV remediation due2026-08-23

Related reporting

August 2026 CVE Landscaperecordedfuture
TrueConf security advisory (AV26-835)cccs_ca
CISA Adds Two Known Exploited Vulnerabilities to Catalogcisa_advisories
[CISA KEV] CVE-2026-72529 — TrueConf Server: TrueConf Server Missing Authentication for Critical Function Vulnerabilitycisa_kev