Ethical Hacking News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities in TrueConf Server to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities pose a significant risk to organizations that use TrueConf Server and highlight the need for organizations to prioritize vulnerability management and patch their systems accordingly. Organizations must take immediate action to address these vulnerabilities to prevent potential attacks and protect their networks, systems, and data.
Two critical vulnerabilities (CVE-2026-72529 and CVE-2026-72530) have been added to the Known Exploited Vulnerabilities (KEV) catalog by the US Cybersecurity and Infrastructure Security Agency (CISA). The vulnerabilities affect TrueConf Server versions 5.3.x through 5.5.5, posing a significant risk to organizations using the platform. CVE-2026-72529 is a remote code execution vulnerability, while CVE-2026-72530 is a sandbox escape vulnerability. Organizations must prioritize vulnerability management, patch their systems, and implement regular security monitoring and vulnerability scanning to minimize the risk of a successful attack. CISA has issued binding operational directives (BODs) for federal agencies to address the vulnerabilities by specific deadlines.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added two critical vulnerabilities in TrueConf Server to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerabilities, identified as CVE-2026-72529 and CVE-2026-72530, pose a significant risk to organizations that use TrueConf Server, an on-premises video conferencing and unified communications platform.
TrueConf Server is typically used by businesses, government organizations, and other institutions that want to maintain control over their communications and data. However, the recent addition of these vulnerabilities to the KEV catalog highlights the need for organizations to prioritize vulnerability management and patch their systems accordingly.
CVE-2026-72529 is a remote code execution vulnerability that allows an unauthenticated remote attacker with network access to TCP port 4307 to execute arbitrary scripts. This vulnerability affects TrueConf Server versions 5.3.x through 5.3.9, 5.4.x through 5.4.9, 5.5.x through 5.5.5, and earlier versions. An attacker who can reach the vulnerable service could potentially compromise the server and use it as an entry point into the affected network.
CVE-2026-72530 is a sandbox escape vulnerability that allows an unauthenticated remote attacker with network access to TCP port 4307 to break out of an isolated environment and execute arbitrary code on the underlying host. This vulnerability also affects TrueConf Server versions 5.3.x through 5.3.9, 5.4.x through 5.4.9, 5.5.x through 5.5.5, and earlier versions. By sending a specially crafted script, an attacker could escape the restricted environment and gain code execution on the host system, potentially leading to a full server compromise.
The addition of these vulnerabilities to the KEV catalog is a reminder that organizations must stay vigilant and proactive in addressing known exploited vulnerabilities. Vyacheslav Kopeytsev from Kaspersky ICS CERT discovered both vulnerabilities, highlighting the importance of regular security monitoring and vulnerability scanning.
CISA has issued binding operational directives (BODs) for federal agencies to address these vulnerabilities by specific deadlines. Federal agencies are required to fix the flaw CVE-2026-72529 by August 23, 2026, and CVE-2026-72530 by September 2, 2026. Private organizations are also advised to review the KEV catalog and address these vulnerabilities in their infrastructure to prevent potential attacks.
In light of these critical vulnerabilities, organizations must prioritize vulnerability management and take immediate action to patch their systems. This includes regular security monitoring, vulnerability scanning, and patch management to ensure that all known exploited vulnerabilities are addressed. By doing so, organizations can minimize the risk of a successful attack and protect their networks, systems, and data.
Related Information:
https://www.ethicalhackingnews.com/articles/US-CISA-Adds-Critical-Vulnerabilities-in-TrueConf-Server-to-Known-Exploited-Vulnerabilities-Catalog-ehn.shtml
https://securityaffairs.com/197602/security/u-s-cisa-adds-trueconf-server-flaws-to-its-known-exploited-vulnerabilities-catalog.html
https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-trueconf-vulnerabilities/
https://nvd.nist.gov/vuln/detail/CVE-2026-72529
https://www.cvedetails.com/cve/CVE-2026-72529/
https://nvd.nist.gov/vuln/detail/CVE-2026-72530
https://www.cvedetails.com/cve/CVE-2026-72530/
Published: Fri Aug 21 05:02:49 2026 by llama3.2 3B Q4_K_M
