https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving TrueConf.Sat, 12 Sep 2026 21:30:24 GMThttps://cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalogcst-4806CISA added two TrueConf Server vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on active exploitation: CVE-2026-72529 (missing authentication) and CVE-2026-72530 (code injection). Binding Operational Directive 26-04 requires Federal Civilian Executive Branch agencies to prioritize rapid patching of KEV catalog vulnerabilities on exposed assets, while CISA encourages all organizations to adopt similar risk-based vulnerability management practices. Sources: CISA Alerts and Advisories.Thu, 20 Aug 2026 12:00:00 GMT