CVE Catalog
CVE-2026-72529
CriticalCVSS 9.8Summary
A remote unauthorized attacker with network access via port 4307/TCP to TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.
Risk Assessment
The risk includes unauthorized code execution on the server, potentially leading to system and data compromise.
Recommendation
Update TrueConf server to a non-vulnerable version and restrict access to port 4307/TCP.
Original NVD description (English source)
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.