[KEV] CVE-2026-72530: TrueConf Server Code Injection Vulnerability
Active exploitation (KEV)
What to do
- On CISA KEV — actively exploited. Patch immediately.
TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.
CVE · detail
- CVE-2026-72530KEVEPSS 2%NVD ↗