{"vulnerability": "cve-2026-7252", "sightings": [{"uuid": "d7d6a930-d903-4f33-898d-6584bc15d2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7252", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlan2wfwpp2w", "content": "\ud83d\udfe0 CVE-2026-7252 - High (8.1)\n\nThe WP-Optimize \u2013 Cache, Compress images, Minify & Clean database to boost page speed & perform...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7252/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-07T06:54:52.413796Z"}, {"uuid": "fc9964a1-845b-4389-8e89-5a785847c815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7252", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlaztqrzjx2r", "content": "CVE-2026-7252 - WP-Optimize\nCVE ID : CVE-2026-7252\n \n Published : May 7, 2026, 6:16 a.m. | 2\u00a0hours, 8\u00a0minutes ago\n \n Description : The WP-Optimize \u2013 Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to ...", "creation_timestamp": "2026-05-07T10:43:30.086255Z"}, {"uuid": "fa66248b-e7ae-4282-aeec-9971a64d8d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://t.me/CyberDispatch/2629", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced that hackers are exploiting two vulnerabilities, CVE-2026-72529 and CVE-2026-72530, in the TrueConf Server video conferencing software, and has added these flaws to its list of actively exploited vulnerabilities.", "creation_timestamp": "2026-08-30T00:00:38.626701Z"}, {"uuid": "15438015-2bc1-4cf2-b650-3b6fb14a2c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7252", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mmgscawvai2m", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-7252 WP-Optimize\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nWP-Optimize\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u3001WordPress\u306e\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u3092\u5411\u4e0a\u3055\u305b\u308b\u305f\u3081\u306b\u30ad\u30e3\u30c3\u30b7\u30e5\u3001\u753b\u50cf\u306e\u5727\u7e2e\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u30af\u30ea\u30fc\u30f3\u30a2\u30c3\u30d7\u3092\u884c\u3046\u30c4\u30fc\u30eb\u3067\u3059\u304c\u3001\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\uff084.5.2\u3092\u542b\u3080\uff09\u306b\u304a\u3044\u3066\u3001", "creation_timestamp": "2026-05-22T11:09:36.967699Z"}, {"uuid": "c70a7c8b-41c0-4ba2-9afa-a97fe3046619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msu3irlfct2d", "content": "CVE-2026-72526\nA vulnerability in OpenShift's multicloud integrations component allows an attacker to execute arbitrary code on managed clusters. This can happen if a tenant with permission to create applications on the hub\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-12T02:30:05.591681Z"}, {"uuid": "a3142de0-ad09-43f1-ae44-f7c25c323880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msu6pvenuw26", "content": "OpenShift Turns One Tenant\u2019s App Permission Into Cluster-Wide Disaster\nPANIC 86% | Lag 0.0h | CVE-2026-72526 in OpenShift's multicloud integrations component can let an attacker execute arbitrar\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-12T03:27:45.849365Z"}, {"uuid": "b17a95ca-2adf-4903-b171-4e00e022f341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msualf2uo62a", "content": "\ud83d\udd34 CVE-2026-72526 - Critical (9.9)\n\nA flaw was found in the multicloud-integrations component. The Application propagation controller...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72526/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T04:01:03.920591Z"}, {"uuid": "9031c563-8488-4f7f-a135-cc7c15656a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtkk2nabh22m", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds Two Known Exploited Vulnerabilities to Catalog  #CISA (Aug 20)\n\nCVE-2026-72529 TrueConf\u30b5\u30fc\u30d0\u30fc\u306e\u91cd\u8981\u306a\u6a5f\u80fd\u306b\u5bfe\u3059\u308b\u8a8d\u8a3c\u306e\u6b20\u5982\u306e\u8106\u5f31\u6027  \nCVE-2026-72530 TrueConf\u30b5\u30fc\u30d0\u30fc\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-21T00:49:12.010235Z"}, {"uuid": "49aa2b9f-e13c-4d65-8e12-b78f86c18437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hlfgalslvcsdn", "content": "CVE-2026-72526 - Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation\nCVE ID : CVE-2026-72526\n \n Published : Aug. 12, 2026, 2:16 a.m. | 1\u00a0hour, 27\u00a0minutes ago...", "creation_timestamp": "2026-08-12T04:14:06.790040Z"}, {"uuid": "501da4ce-e74e-48e2-8d36-45615596fbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72526", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117080655603961968", "content": "CVE-2026-72526 (CRITICAL, CVSS 9.9) in Red Hat Advanced Cluster Management for Kubernetes 2 lets low-priv hub users escalate to cluster-admin on managed clusters. No official fix. Restrict Application creation permissions now. https://radar.offseq.com/threat/cve-2026-72526-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-red-hat-advanced-cluster-d135ff679a7da34d #OffSeq #RedHat #Kubernetes #CVE2026_72526", "creation_timestamp": "2026-08-12T04:30:27.851931Z"}, {"uuid": "a40cc93e-ac86-479f-9690-ce107d2b3a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72526", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msuca2kjex2t", "content": "Red Hat Advanced Cluster Management for Kubernetes 2 hit by CRITICAL vuln (CVE-2026-72526, CVSS 9.9) \u2014 low-priv users can gain cluster-admin on managed clusters. Restrict Application creation permissions. https://radar.offseq.com/threat/cve-2026-72526-unintended-proxy-or-intermediary-confused-dep...", "creation_timestamp": "2026-08-12T04:30:29.576314Z"}, {"uuid": "59fa9b30-6ce8-4758-aa05-6fdcf8b4d6bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtko3bkrlf2r", "content": "CVE-2026-72529 is trending. Hype score 9, currently #7 on cvemon.\n\nA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72529", "creation_timestamp": "2026-08-21T02:01:08.233999Z"}, {"uuid": "427e7257-8e14-43b1-a561-bdbf07b4c170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtkq3lwkrv22", "content": "\ud83d\udccc CVE-2026-72529 - A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, a... https://www.cyberhub.blog/cves/CVE-2026-72529", "creation_timestamp": "2026-08-21T02:37:06.324491Z"}, {"uuid": "aff3f95d-6e9e-425b-a7fb-11a1fe210e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/pphm_HackerNews/2785", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities\n\nThe US cybersecurity agency CISA on Thursday warned federal agencies that threat actors have been exploiting two vulnerabilities in TrueConf.\n\nA secure on-premises video conferencing platform, TrueConf relies on Scalable Video Coding (SVC) to connect client applications through a dedicated corporate server.\n\nAll TrueConf Server versions since 2022 contain two critical-severity bugs tracked as CVE-2026-72529 and CVE-2026-72530 that allow attackers to execute arbitrary code.", "creation_timestamp": "2026-08-21T23:00:05.308396Z"}, {"uuid": "d43e442f-2585-4927-9ce8-953fede77667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72529", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mtlknn3drh2b", "content": "Port 4307/TCP. That's all an attacker needs.\n\nCVE-2026-72529.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72529-trueconf-server-rce-exploited-in-the-wild/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-21T10:32:29.572563Z"}, {"uuid": "84669e0c-2bf1-489c-91b1-80b084f4ab87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtbrxefdgo2s", "content": "Red Hat fixes RHACM remote code execution flaws, including CVE-2026-72526 and CVE-2026-73268, both CVSS 9.9. See patch and mitigation steps.\n\n#RHACM #RedHat #Kubernetes #ArgoCD #RCE #CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T13:16:34.487796Z"}, {"uuid": "31e684cd-fbcc-4a9e-bd99-6bf168c96d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthde42ssk2f", "content": "\ud83d\udea8 CVE-2026-72529 \u2014 CVSS 9.3 CRITICAL\n\nA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72529\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:11:14.074706Z"}, {"uuid": "668fa540-fb50-47e6-85e5-2d90d7f4fb16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtlnujhz6h2p", "content": "\ud83d\udd34 EXPLOITED\n\nTrueConf Server has two exploited flaws (CVE-2026-72529/72530) that chain over port 4307 to code execution on the host.\n\nAffects self-hosted TrueConf before 5.5.5 / 5.4.9 / 5.3.9.\n\nNow CISA KEV-listed. Patch, then hunt.", "creation_timestamp": "2026-08-21T11:30:01.875032Z"}, {"uuid": "83a6d57d-d390-40b6-8e71-da2a74669804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/bdufstecru/3371", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-11246\nCVE-2026-72529\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 5.5.5.10010 (\u0434\u043b\u044f Windows) \u0438 5.5.5.10009 (Linux)\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 5.4.9.10018 (\u0434\u043b\u044f Windows) \u0438 5.4.9.10019 (Linux)\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 5.3.9.10013 (\u0434\u043b\u044f Windows) \u0438 5.3.9.10015 (Linux)", "creation_timestamp": "2026-08-10T15:00:03.135125Z"}, {"uuid": "007495db-e56a-4122-8ded-685be4866275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2785", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities\n\nThe US cybersecurity agency CISA on Thursday warned federal agencies that threat actors have been exploiting two vulnerabilities in TrueConf.\n\nA secure on-premises video conferencing platform, TrueConf relies on Scalable Video Coding (SVC) to connect client applications through a dedicated corporate server.\n\nAll TrueConf Server versions since 2022 contain two critical-severity bugs tracked as CVE-2026-72529 and CVE-2026-72530 that allow attackers to execute arbitrary code.", "creation_timestamp": "2026-08-22T00:00:09.517214Z"}, {"uuid": "e160489e-6ea9-4b40-84f5-dfe8873699a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtjsbjv3cq23", "content": "\ud83d\uded1 CVE-2026-72529\nTrueConf Server\nCVSS 9.3 / EPSS 0% / KEV: No\nTL;DR: A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server\u2026\nhttps://cvesentinel.com/report/CVE-2026-72529?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-20T17:43:33.477872Z"}, {"uuid": "c99529af-281b-4995-a22d-6d0b21c305ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtffcfzsa32d", "content": "CVE-2026-72526 is trending. Hype score 4, currently #9 on cvemon.\n\nA flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Application Custom Resource\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72526", "creation_timestamp": "2026-08-18T23:40:45.363954Z"}, {"uuid": "c7098a4c-9068-4104-90db-47835a03eae4", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ec1bf3f1-b350-494f-9140-1560d71cc24d", "content": "", "creation_timestamp": "2026-08-20T18:00:02.489805Z"}, {"uuid": "fff4a91e-b024-4189-9951-692a56d1a31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72529", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mtlsvv43xc2r", "content": "\ud83d\udcf0 CISA Instruksikan Instansi Federal Segera Tambal Kerentanan Kritis TrueConf Server yang Dieksploitasi Aktif\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/21/cisa-perintahkan-tambal-kerentanan-kritis-trueconf-server/\n\n#celahKeamanan #cisa #cve-2026-72529 #cve-2026-72530 #keam", "creation_timestamp": "2026-08-21T13:00:15.684125Z"}, {"uuid": "da5b45d4-616a-4447-91d1-87b0b001cf3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/CyberDispatch/2629", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced that hackers are exploiting two vulnerabilities, CVE-2026-72529 and CVE-2026-72530, in the TrueConf Server video conferencing software, and has added these flaws to its list of actively exploited vulnerabilities.", "creation_timestamp": "2026-08-29T20:00:05.354983Z"}, {"uuid": "6521768d-5aa3-4d91-88d2-4b301cbdb38d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/bdufstecru/3371", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-11246\nCVE-2026-72529\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 5.5.5.10010 (\u0434\u043b\u044f Windows) \u0438 5.5.5.10009 (Linux)\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 5.4.9.10018 (\u0434\u043b\u044f Windows) \u0438 5.4.9.10019 (Linux)\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 5.3.9.10013 (\u0434\u043b\u044f Windows) \u0438 5.3.9.10015 (Linux)", "creation_timestamp": "2026-08-11T00:00:07.627027Z"}, {"uuid": "71b74f08-ee23-4a42-95be-741832dd0a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthswrcnqt2m", "content": "CVE-2026-72529 - trueconf server\nTrueConf Server versions 5.3 to 5.5 have a security flaw that allows an unauthorized attacker to execute any script on the server if they have access to it over the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#trueconfserver #trueconf #CVE #infosec", "creation_timestamp": "2026-08-19T22:50:06.827448Z"}, {"uuid": "1351dc24-620a-4656-887a-24f8c741b8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mtlzqdekbt2k", "content": "Critical Alert: CVE-2026-72529 allows unauthenticated command execution on TrueConf Servers. Our T-SUITE report maps the attack surface and provides immediate hardening steps to secure your perimeter. Read the full brief here. https://thecybermind.co/jily", "creation_timestamp": "2026-08-21T15:02:26.028283Z"}, {"uuid": "b0ae4dea-8de0-4b46-bdf0-c57cdf7023c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtk2q3uhhf2n", "content": "~Cisa~\nCISA added two actively exploited TrueConf Server vulnerabilities to the KEV Catalog.\n-\nIOCs: CVE-2026-72529, CVE-2026-72530\n-\n#CISA #CVE202672529 #ThreatIntel", "creation_timestamp": "2026-08-20T20:14:52.304657Z"}, {"uuid": "bf094bd7-e98c-48de-b50e-b8b56742098a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117129671033700598", "content": "CISA has added two known vulnerabilities to the KEV catalogue.\n-  CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529\n-  CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA \nYesterday:\nCisco:\nCRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-20T20:15:43.944484Z"}, {"uuid": "e041bfad-342a-4980-ba5d-37ceda9eebbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtk4omifyo25", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-72529", "creation_timestamp": "2026-08-20T20:49:50.040958Z"}, {"uuid": "e2feb816-5309-4d37-a19e-b8956c65b9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtk6wknkvi26", "content": "CISA confirms two TrueConf Server flaws, CVE-2026-72529 and CVE-2026-72530, are exploited in the wild to deliver PhantomCore malware. Patch now.\n\n#TrueConf #CVE #ExploitedInTheWild #PhantomCore #HeadMare #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T21:30:04.500659Z"}, {"uuid": "afa5b80c-33b9-4ffe-ae52-15d24d0754fe", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0aa97a70-a100-4c0e-8b42-70adf4b7bd9c", "content": "", "creation_timestamp": "2026-08-21T18:00:43.044116Z"}, {"uuid": "6e76a3b6-0929-4197-b7bf-4978c0277880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72522", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mstt7csdh32s", "content": "3/6\n\nloop caused by treating\n  low surrogates (Unicode) the same as high surrogates in functions *_toUtf16.\n  For more information, see:\n    https://www.cve.org/CVERecord?id=CVE-2026-72522\n  (* Security fix *)\nl/libpsl-0.23.2-x86_64-1.txz:  Upgraded.", "creation_timestamp": "2026-08-12T00:01:38.385914Z"}, {"uuid": "6720eb10-0233-4200-a8a9-109fd9bcea5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://t.me/critical_bug/1822", "content": "CVE-2026-72530 TrueConf Server: RCE \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439\n\n\ud83d\ude48\u26d4\ufe0f\ud83e\udeb2 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b TrueConf Server \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0439 \u041e\u0421. \u0422\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0440\u0442 4307/TCP.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 Head Mare \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u044f\u0437\u043a\u0443 CVE-2026-72529 \u0438 CVE-2026-72530:\n\n4307/TCP \u2192 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u2192 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 sandbox \u2192 SYSTEM \u2192 web shell \u2192 \u043f\u043e\u0434\u043c\u0435\u043d\u0430 TrueConf Client\n\n\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u043b\u0438 locale.php, \u0443\u0434\u0430\u043b\u044f\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u0438\u0437 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0441\u043b\u0443\u0436\u0431\u044b SysExcSvc \u0438 SysReadSvc. \u0417\u0430\u0442\u0435\u043c \u0448\u0442\u0430\u0442\u043d\u044b\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a TrueConf Client \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0441 PhantomCore.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0441\u043a\u0430\u0447\u0430\u0432\u0448\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\n- \u043d\u0438\u0436\u0435 5.3;\n- 5.3 \u0434\u043e 5.3.9;\n- 5.4 \u0434\u043e 5.4.9;\n- 5.5 \u0434\u043e 5.5.5.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c: \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c 4307/TCP, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c locale.php, \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0438, \u0441\u043b\u0443\u0436\u0431\u044b SysExcSvc/SysReadSvc \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 PoC \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430, \u0430 CVE \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0432 CISA KEV.\n\n\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442: https://eh.su/reports/trueconf-server-prevraschaet-videokonferentsii-v-kanal-dostavki-malvari-cve-2026-72530\n\n#TrueConf #CVE202672530 #RCE #CyberSecurity #PhantomCore", "creation_timestamp": "2026-08-28T00:00:31.001310Z"}, {"uuid": "cf63be59-921e-43e0-a60f-6235d77ba2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/captainsmok3r_official/470", "content": "CVE-2026-72529 (CVSS 9.8) + CVE-2026-72530 (CVSS 9.0): Unauthenticated RCE in TrueConf Server", "creation_timestamp": "2026-08-24T18:00:03.582204Z"}, {"uuid": "1ec3df3a-1825-4861-91b2-0e281590fc6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/captainsmok3r_official/470", "content": "CVE-2026-72529 (CVSS 9.8) + CVE-2026-72530 (CVSS 9.0): Unauthenticated RCE in TrueConf Server", "creation_timestamp": "2026-08-25T00:00:11.441890Z"}, {"uuid": "b4206d33-5a12-4dc9-be17-005177e45a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://t.me/critical_bug/1822", "content": "CVE-2026-72530 TrueConf Server: RCE \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439\n\n\ud83d\ude48\u26d4\ufe0f\ud83e\udeb2 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b TrueConf Server \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0439 \u041e\u0421. \u0422\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0440\u0442 4307/TCP.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 Head Mare \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u044f\u0437\u043a\u0443 CVE-2026-72529 \u0438 CVE-2026-72530:\n\n4307/TCP \u2192 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u2192 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 sandbox \u2192 SYSTEM \u2192 web shell \u2192 \u043f\u043e\u0434\u043c\u0435\u043d\u0430 TrueConf Client\n\n\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u043b\u0438 locale.php, \u0443\u0434\u0430\u043b\u044f\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u0438\u0437 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0441\u043b\u0443\u0436\u0431\u044b SysExcSvc \u0438 SysReadSvc. \u0417\u0430\u0442\u0435\u043c \u0448\u0442\u0430\u0442\u043d\u044b\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a TrueConf Client \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0441 PhantomCore.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0441\u043a\u0430\u0447\u0430\u0432\u0448\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\n- \u043d\u0438\u0436\u0435 5.3;\n- 5.3 \u0434\u043e 5.3.9;\n- 5.4 \u0434\u043e 5.4.9;\n- 5.5 \u0434\u043e 5.5.5.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c: \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c 4307/TCP, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c locale.php, \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0438, \u0441\u043b\u0443\u0436\u0431\u044b SysExcSvc/SysReadSvc \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 PoC \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430, \u0430 CVE \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0432 CISA KEV.\n\n\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442: https://eh.su/reports/trueconf-server-prevraschaet-videokonferentsii-v-kanal-dostavki-malvari-cve-2026-72530\n\n#TrueConf #CVE202672530 #RCE #CyberSecurity #PhantomCore", "creation_timestamp": "2026-08-27T20:00:11.675965Z"}]}