Skip to content
pwned.coffee
Updated 29 min ago
Today's specials
Specials
13
Past orders
Past
The menu
Menu
Your usual
Usual
Delivery
Delivery
History
20 Aug 2026
1 new, 0 updated.
New that day
high
patched
exploited
20 Aug 2026
TrueConf Server Code Injection Vulnerability
TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system. Can be chained with CVE-2026-72529. Added to CISA KEV on 2026-08-20 (federal deadline 2026-09-03).
CVE-2026-72529
CVE-2026-72530
5 sources