CVE-2026-72529

TrueConf Server Missing Authentication for Critical Function Vulnerability

Trueconf Server

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.

19. Aug 2026

Ausgewertete Quellen

• Hinweis
  https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/
• Hinweis
  https://securelist.com/tr/head-mare-targets-trueconf-server-with-phantomcore/120988/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72529
• CISA
  TrueConf Server Missing Authentication for Critical Function Vulnerability
• NVD
  CVE-2026-72529