CVE-2026-72530
CriticalCVSS 9.0Summary
A remote unauthorized attacker with network access via port 4307/TCP to TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.
Risk Assessment
The risk includes full host system compromise, potentially leading to loss of confidentiality, integrity, and availability.
Recommendation
Immediately update TrueConf server to a non-vulnerable version and restrict access to port 4307/TCP.
Original NVD description (English source)
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.