Veille CVE

Jeudi 20 août 2026

2 CVE

  1. CVE-2026-72530 9.0 Critique Exploitée

    TrueConf Server · Trueconf trueconf server

    A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.

  2. CVE-2026-72529 – Non évaluée Exploitée

    TrueConf Server

    TrueConf Server Missing Authentication for Critical Function Vulnerability — TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.