<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: TrueConf Server</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/trueconf-server.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-72530: TrueConf Server Code Injection Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-72530/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-72530/</guid><pubDate>Thu, 20 Aug 2026 00:00:00 +0000</pubDate><description>TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.</description></item><item><title>CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-72529/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-72529/</guid><pubDate>Thu, 20 Aug 2026 00:00:00 +0000</pubDate><description>TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.</description></item></channel></rss>
