HIGHVulnerability
Verified
Global

CISA KEV: TrueConf Server — TrueConf Server Code Injection Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.

Analysis

TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system. Added to CISA Known Exploited Vulnerabilities catalog on 2026-08-20. Remediation due: 2026-09-03.

Indicators of Compromise (1)

CVE (1)
CVE-2026-72530
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Aug 20, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerability

Wireshark 4.6.9 Released, (Sun, Sep 27th)

Wireshark release 4.6.9 fixes 19 vulnerabilities and 16 bugs.

SANS ISC
LOWVulnerability

Cloudflare fixes Containers cross-tenant flaw exposing customer data

Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host. [...]

BleepingComputer
MEDIUMVulnerability

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28. The post Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks appeared first on SecurityWeek .

CVE-2026-65660
SecurityWeek