CVE-2026-72530 CISA KEV · Actively exploited
Code injection in TrueConf Server
CVSS score
9.0
EPSS probability
%1.7
Risk score
0.3
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Este repositorio contiene una demostración educativa de la mitigación y detección para **CVE-2026-72530**, una vulnerabilidad crítica de **Code Injection y Sandbox Escape** en TrueConf Server.
Makefile Go / Python
https://securelist.com/tr/head-mare-targets-trueconf-server-with-phantomcore/120988/
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2026-72529 Actively exploitedMissing authentication in TrueConf Server
Patch status unknown Public Exploits:1EPSS %1
8.8
CVE-2017-20120Cross-site request forgery in Trueconf Server
Patch status unknownEPSS %0
8.7
CVE-2025-66824Cross-site scripting in Trueconf Server
Patch status unknown Public Exploits:1EPSS %0
7.3
CVE-2025-66834Vulnerability in Trueconf Server
Patch status unknown Public Exploits:1EPSS %0
7.1
CVE-2025-66835Vulnerability in Trueconf
Patch status unknown Public Exploits:1EPSS %0
5.4
CVE-2025-66823Cross-site scripting in Trueconf Server
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-72530"