{"vulnerability": "cve-2026-7252", "sightings": [{"uuid": "d7d6a930-d903-4f33-898d-6584bc15d2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7252", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlan2wfwpp2w", "content": "\ud83d\udfe0 CVE-2026-7252 - High (8.1)\n\nThe WP-Optimize \u2013 Cache, Compress images, Minify & Clean database to boost page speed & perform...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7252/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-07T06:54:52.413796Z"}, {"uuid": "fc9964a1-845b-4389-8e89-5a785847c815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7252", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlaztqrzjx2r", "content": "CVE-2026-7252 - WP-Optimize\nCVE ID : CVE-2026-7252\n \n Published : May 7, 2026, 6:16 a.m. | 2\u00a0hours, 8\u00a0minutes ago\n \n Description : The WP-Optimize \u2013 Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to ...", "creation_timestamp": "2026-05-07T10:43:30.086255Z"}, {"uuid": "fa66248b-e7ae-4282-aeec-9971a64d8d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://t.me/CyberDispatch/2629", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced that hackers are exploiting two vulnerabilities, CVE-2026-72529 and CVE-2026-72530, in the TrueConf Server video conferencing software, and has added these flaws to its list of actively exploited vulnerabilities.", "creation_timestamp": "2026-08-30T00:00:38.626701Z"}, {"uuid": "15438015-2bc1-4cf2-b650-3b6fb14a2c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7252", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mmgscawvai2m", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-7252 WP-Optimize\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nWP-Optimize\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u3001WordPress\u306e\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u3092\u5411\u4e0a\u3055\u305b\u308b\u305f\u3081\u306b\u30ad\u30e3\u30c3\u30b7\u30e5\u3001\u753b\u50cf\u306e\u5727\u7e2e\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u30af\u30ea\u30fc\u30f3\u30a2\u30c3\u30d7\u3092\u884c\u3046\u30c4\u30fc\u30eb\u3067\u3059\u304c\u3001\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\uff084.5.2\u3092\u542b\u3080\uff09\u306b\u304a\u3044\u3066\u3001", "creation_timestamp": "2026-05-22T11:09:36.967699Z"}, {"uuid": "c70a7c8b-41c0-4ba2-9afa-a97fe3046619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msu3irlfct2d", "content": "CVE-2026-72526\nA vulnerability in OpenShift's multicloud integrations component allows an attacker to execute arbitrary code on managed clusters. This can happen if a tenant with permission to create applications on the hub\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-12T02:30:05.591681Z"}, {"uuid": "a3142de0-ad09-43f1-ae44-f7c25c323880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msu6pvenuw26", "content": "OpenShift Turns One Tenant\u2019s App Permission Into Cluster-Wide Disaster\nPANIC 86% | Lag 0.0h | CVE-2026-72526 in OpenShift's multicloud integrations component can let an attacker execute arbitrar\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-12T03:27:45.849365Z"}, {"uuid": "b17a95ca-2adf-4903-b171-4e00e022f341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msualf2uo62a", "content": "\ud83d\udd34 CVE-2026-72526 - Critical (9.9)\n\nA flaw was found in the multicloud-integrations component. The Application propagation controller...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72526/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T04:01:03.920591Z"}, {"uuid": "9031c563-8488-4f7f-a135-cc7c15656a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtkk2nabh22m", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds Two Known Exploited Vulnerabilities to Catalog  #CISA (Aug 20)\n\nCVE-2026-72529 TrueConf\u30b5\u30fc\u30d0\u30fc\u306e\u91cd\u8981\u306a\u6a5f\u80fd\u306b\u5bfe\u3059\u308b\u8a8d\u8a3c\u306e\u6b20\u5982\u306e\u8106\u5f31\u6027  \nCVE-2026-72530 TrueConf\u30b5\u30fc\u30d0\u30fc\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-21T00:49:12.010235Z"}, {"uuid": "49aa2b9f-e13c-4d65-8e12-b78f86c18437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hlfgalslvcsdn", "content": "CVE-2026-72526 - Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation\nCVE ID : CVE-2026-72526\n \n Published : Aug. 12, 2026, 2:16 a.m. | 1\u00a0hour, 27\u00a0minutes ago...", "creation_timestamp": "2026-08-12T04:14:06.790040Z"}, {"uuid": "501da4ce-e74e-48e2-8d36-45615596fbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72526", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117080655603961968", "content": "CVE-2026-72526 (CRITICAL, CVSS 9.9) in Red Hat Advanced Cluster Management for Kubernetes 2 lets low-priv hub users escalate to cluster-admin on managed clusters. No official fix. Restrict Application creation permissions now. https://radar.offseq.com/threat/cve-2026-72526-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-red-hat-advanced-cluster-d135ff679a7da34d #OffSeq #RedHat #Kubernetes #CVE2026_72526", "creation_timestamp": "2026-08-12T04:30:27.851931Z"}, {"uuid": "a40cc93e-ac86-479f-9690-ce107d2b3a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72526", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msuca2kjex2t", "content": "Red Hat Advanced Cluster Management for Kubernetes 2 hit by CRITICAL vuln (CVE-2026-72526, CVSS 9.9) \u2014 low-priv users can gain cluster-admin on managed clusters. Restrict Application creation permissions. https://radar.offseq.com/threat/cve-2026-72526-unintended-proxy-or-intermediary-confused-dep...", "creation_timestamp": "2026-08-12T04:30:29.576314Z"}, {"uuid": "59fa9b30-6ce8-4758-aa05-6fdcf8b4d6bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtko3bkrlf2r", "content": "CVE-2026-72529 is trending. Hype score 9, currently #7 on cvemon.\n\nA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72529", "creation_timestamp": "2026-08-21T02:01:08.233999Z"}, {"uuid": "427e7257-8e14-43b1-a561-bdbf07b4c170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtkq3lwkrv22", "content": "\ud83d\udccc CVE-2026-72529 - A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, a... https://www.cyberhub.blog/cves/CVE-2026-72529", "creation_timestamp": "2026-08-21T02:37:06.324491Z"}, {"uuid": "aff3f95d-6e9e-425b-a7fb-11a1fe210e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/pphm_HackerNews/2785", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities\n\nThe US cybersecurity agency CISA on Thursday warned federal agencies that threat actors have been exploiting two vulnerabilities in TrueConf.\n\nA secure on-premises video conferencing platform, TrueConf relies on Scalable Video Coding (SVC) to connect client applications through a dedicated corporate server.\n\nAll TrueConf Server versions since 2022 contain two critical-severity bugs tracked as CVE-2026-72529 and CVE-2026-72530 that allow attackers to execute arbitrary code.", "creation_timestamp": "2026-08-21T23:00:05.308396Z"}, {"uuid": "d43e442f-2585-4927-9ce8-953fede77667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72529", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mtlknn3drh2b", "content": "Port 4307/TCP. That's all an attacker needs.\n\nCVE-2026-72529.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72529-trueconf-server-rce-exploited-in-the-wild/\n\nby Yazoul AI #CyberSecurity #Security", "creation_timestamp": "2026-08-21T10:32:29.572563Z"}, {"uuid": "84669e0c-2bf1-489c-91b1-80b084f4ab87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtbrxefdgo2s", "content": "Red Hat fixes RHACM remote code execution flaws, including CVE-2026-72526 and CVE-2026-73268, both CVSS 9.9. See patch and mitigation steps.\n\n#RHACM #RedHat #Kubernetes #ArgoCD #RCE #CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T13:16:34.487796Z"}, {"uuid": "31e684cd-fbcc-4a9e-bd99-6bf168c96d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthde42ssk2f", "content": "\ud83d\udea8 CVE-2026-72529 \u2014 CVSS 9.3 CRITICAL\n\nA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72529\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:11:14.074706Z"}, {"uuid": "668fa540-fb50-47e6-85e5-2d90d7f4fb16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtlnujhz6h2p", "content": "\ud83d\udd34 EXPLOITED\n\nTrueConf Server has two exploited flaws (CVE-2026-72529/72530) that chain over port 4307 to code execution on the host.\n\nAffects self-hosted TrueConf before 5.5.5 / 5.4.9 / 5.3.9.\n\nNow CISA KEV-listed. Patch, then hunt.", "creation_timestamp": "2026-08-21T11:30:01.875032Z"}, {"uuid": "83a6d57d-d390-40b6-8e71-da2a74669804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/bdufstecru/3371", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-11246\nCVE-2026-72529\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 5.5.5.10010 (\u0434\u043b\u044f Windows) \u0438 5.5.5.10009 (Linux)\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 5.4.9.10018 (\u0434\u043b\u044f Windows) \u0438 5.4.9.10019 (Linux)\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f TrueConf Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 5.3.9.10013 (\u0434\u043b\u044f Windows) \u0438 5.3.9.10015 (Linux)", "creation_timestamp": "2026-08-10T15:00:03.135125Z"}, {"uuid": "007495db-e56a-4122-8ded-685be4866275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2785", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities\n\nThe US cybersecurity agency CISA on Thursday warned federal agencies that threat actors have been exploiting two vulnerabilities in TrueConf.\n\nA secure on-premises video conferencing platform, TrueConf relies on Scalable Video Coding (SVC) to connect client applications through a dedicated corporate server.\n\nAll TrueConf Server versions since 2022 contain two critical-severity bugs tracked as CVE-2026-72529 and CVE-2026-72530 that allow attackers to execute arbitrary code.", "creation_timestamp": "2026-08-22T00:00:09.517214Z"}, {"uuid": "e160489e-6ea9-4b40-84f5-dfe8873699a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtjsbjv3cq23", "content": "\ud83d\uded1 CVE-2026-72529\nTrueConf Server\nCVSS 9.3 / EPSS 0% / KEV: No\nTL;DR: A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server\u2026\nhttps://cvesentinel.com/report/CVE-2026-72529?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-20T17:43:33.477872Z"}, {"uuid": "c99529af-281b-4995-a22d-6d0b21c305ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72526", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtffcfzsa32d", "content": "CVE-2026-72526 is trending. Hype score 4, currently #9 on cvemon.\n\nA flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Application Custom Resource\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72526", "creation_timestamp": "2026-08-18T23:40:45.363954Z"}, {"uuid": "c7098a4c-9068-4104-90db-47835a03eae4", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ec1bf3f1-b350-494f-9140-1560d71cc24d", "content": "", "creation_timestamp": "2026-08-20T18:00:02.489805Z"}, {"uuid": "fff4a91e-b024-4189-9951-692a56d1a31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72529", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mtlsvv43xc2r", "content": "\ud83d\udcf0 CISA Instruksikan Instansi Federal Segera Tambal Kerentanan Kritis TrueConf Server yang Dieksploitasi Aktif\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/21/cisa-perintahkan-tambal-kerentanan-kritis-trueconf-server/\n\n#celahKeamanan #cisa #cve-2026-72529 #cve-2026-72530 #keam", "creation_timestamp": "2026-08-21T13:00:15.684125Z"}, {"uuid": "da5b45d4-616a-4447-91d1-87b0b001cf3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/CyberDispatch/2629", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced that hackers are exploiting two vulnerabilities, CVE-2026-72529 and CVE-2026-72530, in the TrueConf Server video conferencing software, and has added these flaws to its list of actively exploited vulnerabilities.", "creation_timestamp": "2026-08-29T20:00:05.354983Z"}, {"uuid": "71b74f08-ee23-4a42-95be-741832dd0a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthswrcnqt2m", "content": "CVE-2026-72529 - trueconf server\nTrueConf Server versions 5.3 to 5.5 have a security flaw that allows an unauthorized attacker to execute any script on the server if they have access to it over the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#trueconfserver #trueconf #CVE #infosec", "creation_timestamp": "2026-08-19T22:50:06.827448Z"}, {"uuid": "1351dc24-620a-4656-887a-24f8c741b8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mtlzqdekbt2k", "content": "Critical Alert: CVE-2026-72529 allows unauthenticated command execution on TrueConf Servers. Our T-SUITE report maps the attack surface and provides immediate hardening steps to secure your perimeter. Read the full brief here. https://thecybermind.co/jily", "creation_timestamp": "2026-08-21T15:02:26.028283Z"}, {"uuid": "b0ae4dea-8de0-4b46-bdf0-c57cdf7023c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtk2q3uhhf2n", "content": "~Cisa~\nCISA added two actively exploited TrueConf Server vulnerabilities to the KEV Catalog.\n-\nIOCs: CVE-2026-72529, CVE-2026-72530\n-\n#CISA #CVE202672529 #ThreatIntel", "creation_timestamp": "2026-08-20T20:14:52.304657Z"}, {"uuid": "bf094bd7-e98c-48de-b50e-b8b56742098a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117129671033700598", "content": "CISA has added two known vulnerabilities to the KEV catalogue.\n-  CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529\n-  CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA \nYesterday:\nCisco:\nCRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-20T20:15:43.944484Z"}, {"uuid": "e041bfad-342a-4980-ba5d-37ceda9eebbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtk4omifyo25", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-72529", "creation_timestamp": "2026-08-20T20:49:50.040958Z"}, {"uuid": "e2feb816-5309-4d37-a19e-b8956c65b9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtk6wknkvi26", "content": "CISA confirms two TrueConf Server flaws, CVE-2026-72529 and CVE-2026-72530, are exploited in the wild to deliver PhantomCore malware. Patch now.\n\n#TrueConf #CVE #ExploitedInTheWild #PhantomCore #HeadMare #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T21:30:04.500659Z"}, {"uuid": "afa5b80c-33b9-4ffe-ae52-15d24d0754fe", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0aa97a70-a100-4c0e-8b42-70adf4b7bd9c", "content": "", "creation_timestamp": "2026-08-21T18:00:43.044116Z"}, {"uuid": "6e76a3b6-0929-4197-b7bf-4978c0277880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72522", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mstt7csdh32s", "content": "3/6\n\nloop caused by treating\n  low surrogates (Unicode) the same as high surrogates in functions *_toUtf16.\n  For more information, see:\n    https://www.cve.org/CVERecord?id=CVE-2026-72522\n  (* Security fix *)\nl/libpsl-0.23.2-x86_64-1.txz:  Upgraded.", "creation_timestamp": "2026-08-12T00:01:38.385914Z"}, {"uuid": "cf63be59-921e-43e0-a60f-6235d77ba2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/captainsmok3r_official/470", "content": "CVE-2026-72529 (CVSS 9.8) + CVE-2026-72530 (CVSS 9.0): Unauthenticated RCE in TrueConf Server", "creation_timestamp": "2026-08-24T18:00:03.582204Z"}, {"uuid": "b4206d33-5a12-4dc9-be17-005177e45a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://t.me/critical_bug/1822", "content": "CVE-2026-72530 TrueConf Server: RCE \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM \u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439\n\n\ud83d\ude48\u26d4\ufe0f\ud83e\udeb2 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b TrueConf Server \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0439 \u041e\u0421. \u0422\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0440\u0442 4307/TCP.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 Head Mare \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u044f\u0437\u043a\u0443 CVE-2026-72529 \u0438 CVE-2026-72530:\n\n4307/TCP \u2192 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u2192 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 sandbox \u2192 SYSTEM \u2192 web shell \u2192 \u043f\u043e\u0434\u043c\u0435\u043d\u0430 TrueConf Client\n\n\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u043b\u0438 locale.php, \u0443\u0434\u0430\u043b\u044f\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u0438\u0437 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0441\u043b\u0443\u0436\u0431\u044b SysExcSvc \u0438 SysReadSvc. \u0417\u0430\u0442\u0435\u043c \u0448\u0442\u0430\u0442\u043d\u044b\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a TrueConf Client \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0441 PhantomCore.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0441\u043a\u0430\u0447\u0430\u0432\u0448\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\n\n- \u043d\u0438\u0436\u0435 5.3;\n- 5.3 \u0434\u043e 5.3.9;\n- 5.4 \u0434\u043e 5.4.9;\n- 5.5 \u0434\u043e 5.5.5.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c: \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c 4307/TCP, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c locale.php, \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0438, \u0441\u043b\u0443\u0436\u0431\u044b SysExcSvc/SysReadSvc \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 PoC \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430, \u0430 CVE \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0432 CISA KEV.\n\n\u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442: https://eh.su/reports/trueconf-server-prevraschaet-videokonferentsii-v-kanal-dostavki-malvari-cve-2026-72530\n\n#TrueConf #CVE202672530 #RCE #CyberSecurity #PhantomCore", "creation_timestamp": "2026-08-27T20:00:11.675965Z"}, {"uuid": "8e6e0104-f0ac-4904-8ff5-a29f2cd4a3c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://t.me/VulnerabilityNews/44086", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog  \n\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability \u00a0\nCVE-2026-72530 TrueConf Server Code Injection Vulnerability\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-18T12:00:07.150063Z"}, {"uuid": "297ad5ce-e4cd-4132-a35f-1feca185e452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44086", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog  \n\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability \u00a0\nCVE-2026-72530 TrueConf Server Code Injection Vulnerability\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-19T00:00:27.402840Z"}, {"uuid": "adb27735-ea69-4051-bf7d-0dccec07948a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mw7oxo4pcc2c", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001TrueConf Server\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001 \u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u4ee5\u4e0b\u306e\u8106\u5f31\u6027\u3092\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2026-72529  \uff08CVSS\u30b9\u30b3\u30a29.3\uff09TrueConf\u30b5\u30fc\u30d0\u30fc\u306e\u91cd\u8981\u6a5f\u80fd\u306b\u5bfe\u3059\u308b\u8a8d\u8a3c\u6a5f\u80fd\u306e\u6b20\u843d\u306e\u8106\u5f31\u6027  \nCVE-2026-72530  \uff08CVSS\u30b9\u30b3\u30a29.5\uff09TrueConf\u30b5\u30fc\u30d0\u30fc\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\n\nTrueConf Server\u306f\u3001Tru...", "creation_timestamp": "2026-09-23T21:33:20.555592Z"}, {"uuid": "bf12f702-e2b2-42f7-80d2-022ba3de390b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mw7pxqfogk2c", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nRelease Date August 20, 2026\n\nCVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability  \nCVE-2026-72530 TrueConf Server Code Injection Vulnerability", "creation_timestamp": "2026-09-23T21:51:15.925967Z"}, {"uuid": "6e1f7e1a-b170-4901-9e3d-1f530b6fe7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mw7pyoh4zs2c", "content": "\u7c73\u5f53\u5c40\u3001\u300cTrueConf Server\u300d\u306e\u8106\u5f31\u60272\u4ef6\u3092\u60aa\u7528\u30ea\u30b9\u30c8\u3078\u8ffd\u52a0\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300cTrueConf Server\u300d\u306b\u5224\u660e\u3057\u305f2\u4ef6\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u305f\u3002\u3044\u305a\u308c\u3082\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u3092\u53d7\u3051\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u540c\u88fd\u54c1\u306f\u3001TrueConf\u304c\u63d0\u4f9b\u3059\u308b\u30d3\u30c7\u30aa\u4f1a\u8b70\u3084\u30b3\u30df\u30e5\u30cb\u30b1\u30fc\u30b7\u30e7\u30f3\u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308b\u30b5\u30fc\u30d0\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3002\u540c\u5e81\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670820\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u300cTrueConf Server\u300d\u306b\u95a2\u3059\u308b2\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-72529\u300d\u300cCVE-2026-72530\u300d...", "creation_timestamp": "2026-09-23T21:51:47.654199Z"}]}