Main Vulnerability Database Vulnerabilities #VU144591

Code Injection in TrueConf Server for Windows and TrueConf Server for Linux - CVE-2026-72530

Published: August 24, 2026

Vulnerability identifier: #VU144591

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-72530

CWE-ID: CWE-94

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper input validation. A remote attacker can use a specially crafted script to break out of the isolated environment and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

TrueConf Server for Windows
TrueConf Server for Linux

How to mitigate CVE-2026-72530

Install updates from vendor's website.

TrueConf Server for Windows - addressed in versions 5.3.9, 5.4.9, 5.5.5
TrueConf Server for Linux - addressed in versions 5.3.9, 5.4.9, 5.5.5

External References

Related Security Bulletins