GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-72529 (GCVE-0-2026-72529)

Vulnerability from cvelistv5 – Published: 2026-08-19 16:55 – Updated: 2026-08-21 03:55
VLAI CISA Previdian
Summary
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: active Automatable: yes Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-19 00:00 UTC
CWE
  • CWE-306 - Missing Authentication for Critical Function
Assigner
References
Impacted products
Vendor Product Version CPE status
TrueConf TrueConf Server Affected: * , < 5.3 (custom)
Affected: 5.3 , < 5.3.9 (custom)
Affected: 5.4 , < 5.4.9 (custom)
Affected: 5.5 , < 5.5.5 (custom)
guessed Create a notification for this product.
Credits
Vyacheslav Kopeytsev from Kaspersky ICS CERT
CISA
Known Exploited Vulnerability - GCVE BCP-07 Compliant
KEV entry ID: ec1bf3f1-b350-494f-9140-1560d71cc24d

Vulnerability ID: CVE-2026-72529

Status: Confirmed

Status Updated: 2026-08-20 00:00 UTC

Exploited: Yes

Timestamps
First Seen: 2026-08-20
Asserted: 2026-08-20
Scope
Notes: TrueConf Server Missing Authentication for Critical Function Vulnerability | Affected: TrueConf / Server | Description: TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-08-23 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://trueconf.com/blog/news/security-fixes-updates-and-advisories ; https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-72529
Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details
Cwes CWE-306
Feed CISA Known Exploited Vulnerabilities Catalog
Product Server
Due Date 2026-08-23
Date Added 2026-08-20
Vendorproject TrueConf
Vulnerabilityname TrueConf Server Missing Authentication for Critical Function Vulnerability
Knownransomwarecampaignuse Unknown
References
Created: 2026-08-20 18:00 UTC | Updated: 2026-08-20 18:00 UTC
Previdian
Known Exploited Vulnerability - GCVE BCP-07 Compliant
KEV entry ID: 0aa97a70-a100-4c0e-8b42-70adf4b7bd9c

Vulnerability ID: CVE-2026-72529

Status: Confirmed

Status Updated: 2026-08-20 17:00 UTC

Exploited: Yes

Timestamps
First Seen: 2026-08-20
Asserted: 2026-08-20
Scope
Notes: A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to... | Affected: TrueConf / TrueConf Server | CVSS: 9.3 (CRITICAL) | EPSS: 0.00284 | Used in malware: unknown | Not yet in CISA KEV: False
Evidence

Type: Public Report

Signal: Successful Exploitation

Confidence: 70%

Source: kevintel

Details
Feed KEVIntel (kevintel.com)
Title A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to...
Vendor TrueConf
Product TrueConf Server
Added Date 2026-08-20T17:00:27.883Z
Cvss Score 9.3
Epss Score 0.00284
Cvss Severity CRITICAL
Epss Percentile 0.21051
Used In Malware unknown
Ahead Of Cisa Kev None
Not Yet In Cisa Kev False
References
Created: 2026-08-21 18:00 UTC | Updated: 2026-08-21 18:00 UTC
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-72529",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-19T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-08-20",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72529"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-21T03:55:16.895Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "related"
            ],
            "url": "https://securelist.com/tr/head-mare-targets-trueconf-server-with-phantomcore/120988/"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72529"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-08-20T00:00:00.000Z",
            "value": "CVE-2026-72529 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux"
          ],
          "product": "TrueConf Server",
          "vendor": "TrueConf",
          "versions": [
            {
              "lessThan": "5.3",
              "status": "affected",
              "version": "*",
              "versionType": "custom"
            },
            {
              "lessThan": "5.3.9",
              "status": "affected",
              "version": "5.3",
              "versionType": "custom"
            },
            {
              "lessThan": "5.4.9",
              "status": "affected",
              "version": "5.4",
              "versionType": "custom"
            },
            {
              "lessThan": "5.5.5",
              "status": "affected",
              "version": "5.5",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Vyacheslav Kopeytsev from Kaspersky ICS CERT"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "cvssV4_0": {
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306: Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T16:55:14.949Z",
        "orgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988",
        "shortName": "Kaspersky"
      },
      "references": [
        {
          "name": "KLCERT-26-057: TrueConf Server. Missing Authentication for Critical Function",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update TrueConf server to versions 5.3.9, 5.4.9 or 5.5.5."
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-03T00:00:00.000Z",
          "value": "Issue discovered by Kaspersky ICS CERT and reported to TrueConf"
        },
        {
          "lang": "en",
          "time": "2026-08-04T00:00:00.000Z",
          "value": "Issue confirmed by TrueConf"
        },
        {
          "lang": "en",
          "time": "2026-08-07T00:00:00.000Z",
          "value": "Advisory published by Kaspersky ICS CERT"
        }
      ],
      "workarounds": [
        {
          "lang": "en",
          "value": "Perform a full check with anti-virus software that has up-to-date anti-virus databases and software modules."
        },
        {
          "lang": "en",
          "value": "Conduct a scan for indicators of compromise. In the event of detecting indicators of compromise, change passwords for accounts that may have been compromised and contact Kaspersky ICS CERT at ics-cert@kaspersky.com for further instructions and assistance in investigating the incident."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e45d732a-8f6b-4b6b-be76-7420f6a2b988",
    "assignerShortName": "Kaspersky",
    "cveId": "CVE-2026-72529",
    "datePublished": "2026-08-19T16:55:14.949Z",
    "dateReserved": "2026-08-10T09:55:18.375Z",
    "dateUpdated": "2026-08-21T03:55:16.895Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2026-72529",
      "cwes": "[\"CWE-306\"]",
      "dateAdded": "2026-08-20",
      "dueDate": "2026-08-23",
      "forensicTriage": "Yes",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://trueconf.com/blog/news/security-fixes-updates-and-advisories ; https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-72529",
      "product": "Server",
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
      "shortDescription": "TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.",
      "vendorProject": "TrueConf",
      "vulnerabilityName": "TrueConf Server Missing Authentication for Critical Function Vulnerability"
    },
    "epss": {
      "cve": "CVE-2026-72529",
      "date": "2026-09-17",
      "epss": "0.01554",
      "percentile": "0.73942"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-72529\",\"sourceIdentifier\":\"vulnerability@kaspersky.com\",\"published\":\"2026-08-19T17:21:00.990\",\"lastModified\":\"2026-08-21T04:18:15.753\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.\"}],\"affected\":[{\"source\":\"vulnerability@kaspersky.com\",\"affectedData\":[{\"vendor\":\"TrueConf\",\"product\":\"TrueConf Server\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\",\"Linux\"],\"versions\":[{\"version\":\"*\",\"lessThan\":\"5.3\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"5.3\",\"lessThan\":\"5.3.9\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"5.4\",\"lessThan\":\"5.4.9\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"5.5\",\"lessThan\":\"5.5.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"vulnerability@kaspersky.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"vulnerability@kaspersky.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-19T00:00:00+00:00\",\"id\":\"CVE-2026-72529\",\"options\":[{\"exploitation\":\"active\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"cisaExploitAdd\":\"2026-08-20\",\"cisaActionDue\":\"2026-08-23\",\"cisaRequiredAction\":\"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\",\"cisaVulnerabilityName\":\"TrueConf Server Missing Authentication for Critical Function Vulnerability\",\"weaknesses\":[{\"source\":\"vulnerability@kaspersky.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trueconf:trueconf_server:*:*:*:*:*:windows:*:*\",\"versionEndExcluding\":\"5.3.9.10013\",\"matchCriteriaId\":\"223F39D3-6C0B-449C-BBC4-22E9FD1069B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trueconf:trueconf_server:*:*:*:*:*:linux_kernel:*:*\",\"versionEndExcluding\":\"5.3.9.10015\",\"matchCriteriaId\":\"651E4015-13F5-467A-B994-8CD8CF096F2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trueconf:trueconf_server:*:*:*:*:*:windows:*:*\",\"versionStartIncluding\":\"5.4.0.12689\",\"versionEndExcluding\":\"5.4.9.10072\",\"matchCriteriaId\":\"92B109B3-71FC-46C8-9790-602F6E82A1B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trueconf:trueconf_server:*:*:*:*:*:linux_kernel:*:*\",\"versionStartIncluding\":\"5.4.0.12700\",\"versionEndExcluding\":\"5.4.9.10019\",\"matchCriteriaId\":\"991CB573-4063-4F9F-980C-73049E0D86BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trueconf:trueconf_server:*:*:*:*:*:windows:*:*\",\"versionStartIncluding\":\"5.5.0.13826\",\"versionEndExcluding\":\"5.5.5.10010\",\"matchCriteriaId\":\"BA7EE78E-8CC5-4F6E-8BE2-485C61334D3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trueconf:trueconf_server:*:*:*:*:*:linux_kernel:*:*\",\"versionStartIncluding\":\"5.5.0.13828\",\"versionEndExcluding\":\"5.5.5.10009\",\"matchCriteriaId\":\"1B3BF976-3656-4152-A255-ABA311510C7C\"}]}]}],\"references\":[{\"url\":\"https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/\",\"source\":\"vulnerability@kaspersky.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://securelist.com/tr/head-mare-targets-trueconf-server-with-phantomcore/120988/\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72529\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-72529\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-20T17:44:08.693101Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2026-08-20\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72529\"}}}], \"references\": [{\"url\": \"https://securelist.com/tr/head-mare-targets-trueconf-server-with-phantomcore/120988/\", \"tags\": [\"related\"]}, {\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72529\", \"tags\": [\"government-resource\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-19T17:15:42.018Z\"}, \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-08-20T00:00:00.000Z\", \"value\": \"CVE-2026-72529 added to CISA KEV\"}]}], \"cna\": {\"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Vyacheslav Kopeytsev from Kaspersky ICS CERT\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 9.3, \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"TrueConf\", \"product\": \"TrueConf Server\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\", \"lessThan\": \"5.3\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"5.3\", \"lessThan\": \"5.3.9\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"5.4\", \"lessThan\": \"5.4.9\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"5.5\", \"lessThan\": \"5.5.5\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows\", \"Linux\"], \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-08-03T00:00:00.000Z\", \"value\": \"Issue discovered by Kaspersky ICS CERT and reported to TrueConf\"}, {\"lang\": \"en\", \"time\": \"2026-08-04T00:00:00.000Z\", \"value\": \"Issue confirmed by TrueConf\"}, {\"lang\": \"en\", \"time\": \"2026-08-07T00:00:00.000Z\", \"value\": \"Advisory published by Kaspersky ICS CERT\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Update TrueConf server to versions 5.3.9, 5.4.9 or 5.5.5.\"}], \"references\": [{\"url\": \"https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/\", \"name\": \"KLCERT-26-057: TrueConf Server. Missing Authentication for Critical Function\", \"tags\": [\"third-party-advisory\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Perform a full check with anti-virus software that has up-to-date anti-virus databases and software modules.\"}, {\"lang\": \"en\", \"value\": \"Conduct a scan for indicators of compromise. In the event of detecting indicators of compromise, change passwords for accounts that may have been compromised and contact Kaspersky ICS CERT at ics-cert@kaspersky.com for further instructions and assistance in investigating the incident.\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-306\", \"description\": \"CWE-306: Missing Authentication for Critical Function\"}]}], \"providerMetadata\": {\"orgId\": \"e45d732a-8f6b-4b6b-be76-7420f6a2b988\", \"shortName\": \"Kaspersky\", \"dateUpdated\": \"2026-08-19T16:55:14.949Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-72529\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-21T03:55:16.895Z\", \"dateReserved\": \"2026-08-10T09:55:18.375Z\", \"assignerOrgId\": \"e45d732a-8f6b-4b6b-be76-7420f6a2b988\", \"datePublished\": \"2026-08-19T16:55:14.949Z\", \"assignerShortName\": \"Kaspersky\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.