{"vulnerability": "CVE-2026-72530", "sightings": [{"uuid": "10975b3d-0fe6-4605-9670-efb70594a63a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtkk2nabh22m", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds Two Known Exploited Vulnerabilities to Catalog  #CISA (Aug 20)\n\nCVE-2026-72529 TrueConf\u30b5\u30fc\u30d0\u30fc\u306e\u91cd\u8981\u306a\u6a5f\u80fd\u306b\u5bfe\u3059\u308b\u8a8d\u8a3c\u306e\u6b20\u5982\u306e\u8106\u5f31\u6027  \nCVE-2026-72530 TrueConf\u30b5\u30fc\u30d0\u30fc\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-21T00:49:12.059830Z"}, {"uuid": "7acce5a5-161c-43dc-b636-56520f183c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtko3dm5zx2h", "content": "CVE-2026-72530 is trending. Hype score 8, currently #9 on cvemon.\n\nA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72530", "creation_timestamp": "2026-08-21T02:01:10.447873Z"}, {"uuid": "62675280-ce9d-4346-aa8d-f35f5e0a2891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtkofxozzg2c", "content": "\ud83d\udccc CVE-2026-72530 - A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, a... https://www.cyberhub.blog/cves/CVE-2026-72530", "creation_timestamp": "2026-08-21T02:07:07.290320Z"}, {"uuid": "e4fbe851-d298-458e-ac8a-9e678cbee9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthcttatjf27", "content": "\ud83d\udd34 CVE-2026-72530 - Critical (9)\n\nA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72530/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T18:02:13.107116Z"}, {"uuid": "e8f14e8e-09c1-4399-8acc-53199d981e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdegbfxg2m", "content": "\ud83d\udea8 CVE-2026-72530 \u2014 CVSS 9.5 CRITICAL\n\nA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-72530\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:11:24.444374Z"}, {"uuid": "07240345-d4b8-48bc-8471-91402629ca72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtjsbjbzag24", "content": "\ud83d\uded1 CVE-2026-72530\nTrueConf Server\nCVSS 9.5 / EPSS 0% / KEV: No\nTL;DR: A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server\u2026\nhttps://cvesentinel.com/report/CVE-2026-72530?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-20T17:43:32.756244Z"}, {"uuid": "0987b1ec-a460-4ceb-a63d-47f3f927f7ce", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8ccd8680-8fbf-49bf-a570-82a44fb576c6", "content": "", "creation_timestamp": "2026-08-20T18:00:01.993600Z"}, {"uuid": "34144602-86b4-4660-83b5-10197659c56f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72530", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mtlsvv43xc2r", "content": "\ud83d\udcf0 CISA Instruksikan Instansi Federal Segera Tambal Kerentanan Kritis TrueConf Server yang Dieksploitasi Aktif\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/21/cisa-perintahkan-tambal-kerentanan-kritis-trueconf-server/\n\n#celahKeamanan #cisa #cve-2026-72529 #cve-2026-72530 #keam", "creation_timestamp": "2026-08-21T13:00:15.739812Z"}, {"uuid": "dbd82aae-5722-4898-aca7-3e6c849c1d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthtimhl5d2j", "content": "CVE-2026-72530 - trueconf server\nAttackers with network access to TrueConf servers on certain versions can create a malicious script that lets them escape the server's isolated environment and take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#trueconfserver #trueconf #CVE #infosec", "creation_timestamp": "2026-08-19T23:00:05.068619Z"}, {"uuid": "0b1e9119-1aac-4778-9ccf-423d1b5d055e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtk2q3uhhf2n", "content": "~Cisa~\nCISA added two actively exploited TrueConf Server vulnerabilities to the KEV Catalog.\n-\nIOCs: CVE-2026-72529, CVE-2026-72530\n-\n#CISA #CVE202672529 #ThreatIntel", "creation_timestamp": "2026-08-20T20:14:52.350734Z"}, {"uuid": "2ac5f047-a018-4f6f-aae8-62d51640793e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/trueconf-security-advisory-av26-835", "content": "", "creation_timestamp": "2026-08-20T20:15:05.560537Z"}, {"uuid": "f1d35d34-47dc-4f64-8b5d-76d72d9529f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117129671033700598", "content": "CISA has added two known vulnerabilities to the KEV catalogue.\n-  CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529\n-  CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA \nYesterday:\nCisco:\nCRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-20T20:15:43.997996Z"}, {"uuid": "2410c9c5-bbc1-4a7f-91e7-fe61f9a1a36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtk4olv5gy2j", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-72530: TrueConf Server Code Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-72530", "creation_timestamp": "2026-08-20T20:49:49.365566Z"}, {"uuid": "e771aac4-7edb-42b8-bbce-4dbb9523b114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-72530", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mtm6z4itm52k", "content": "Two critical CVEs in the same product. Same port. Same week.\n\nCVE-2026-72530.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-72530-trueconf-server-rce-exploited-in-the-wild/\n\nby Yazoul AI #CVE #CyberSecurity", "creation_timestamp": "2026-08-21T16:36:49.305871Z"}, {"uuid": "1212d91f-9b6a-4cc5-9e68-16156ead3805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtk6wknkvi26", "content": "CISA confirms two TrueConf Server flaws, CVE-2026-72529 and CVE-2026-72530, are exploited in the wild to deliver PhantomCore malware. Patch now.\n\n#TrueConf #CVE #ExploitedInTheWild #PhantomCore #HeadMare #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T21:30:04.577915Z"}, {"uuid": "a3489ded-124a-4c17-b2ef-493d5a8be1e4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72530", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ab9ff4fd-bf90-4403-b45c-6bbaf4087dbf", "content": "", "creation_timestamp": "2026-08-21T18:00:47.846268Z"}]}