Is CVE-2026-72529 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-72529?

CVE-2026-72529 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-72529

Description

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.