Description
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.
Published: 2026-08-19
Score: 9.5 Critical
EPSS: 1.8% Low
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

Impact

A remote attacker with network access to port 4307/TCP can upload a specially crafted script to TrueConf Server and cause the isolated environment to break out, allowing arbitrary code execution on the host machine. This vulnerability is a classic code‑execution flaw (CWE-94) that permits an attacker to run native commands with the privileges of the server process.

Affected Systems

The affected product is TrueConf Server from TrueConf. Versions vulnerable include 5.3.x through 5.3.9, 5.4.x through 5.4.9, 5.5.x through 5.5.5, and any prior releases before the listed patch versions.

Risk and Exploitability

The CVSS score of 9.5 indicates critical severity. The EPSS score of 0.34% indicates a low but non‑zero exploitation probability. The vulnerability is listed in the CISA KEV catalog, underscoring its potential for exploitation. The attack vector is remote over the network, requiring access to port 4307/TCP; once access is achieved, an attacker can transmit a crafted script that causes the isolated environment to break out, enabling arbitrary code execution on the host with the privileges of the TrueConf server process.

Generated by OpenCVE AI on August 20, 2026 at 22:23 UTC.

Remediation

Vendor Solution

Update TrueConf server to versions 5.3.9, 5.4.9 or 5.5.5.

Vendor Workaround

Perform a full check with anti-virus software that has up-to-date anti-virus databases and software modules.

OpenCVE Recommended Actions

  • Upgrade TrueConf Server to version 5.3.9, 5.4.9, or 5.5.5 to remove the flaw.
  • If upgrading immediately is not possible, perform a full antivirus scan with up‑to‑date signatures, change all affected account passwords, and contact Kaspersky ITS CERT for additional guidance.
  • Ensure that port 4307/TCP is blocked or restricted to trusted networks and not exposed to the public internet.

Generated by OpenCVE AI on August 20, 2026 at 22:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 20 Aug 2026 22:45:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Script Upload in TrueConf Server

Thu, 20 Aug 2026 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Trueconf trueconf Server
CPEs cpe:2.3:a:trueconf:trueconf_server:*:*:*:*:*:linux_kernel:*:*
cpe:2.3:a:trueconf:trueconf_server:*:*:*:*:*:windows:*:*
Vendors & Products Trueconf trueconf Server

Thu, 20 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 20 Aug 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2026-08-20T00:00:00+00:00', 'dueDate': '2026-09-03T00:00:00+00:00'}

Thu, 20 Aug 2026 14:15:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Script on TrueConf Server

Thu, 20 Aug 2026 01:15:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Script on TrueConf Server

Wed, 19 Aug 2026 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Trueconf
Trueconf server
Vendors & Products Trueconf
Trueconf server

Wed, 19 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 19 Aug 2026 17:15:00 +0000

Type Values Removed Values Added
Description A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.
Weaknesses CWE-94
References
Metrics cvssV3_1

{'score': 9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.5, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}

Subscriptions

Trueconf Server Trueconf Server
cve-icon MITRE

Status: PUBLISHED

Assigner: Kaspersky

Published:

Updated: 2026-08-21T03:55:18.512Z

Reserved: 2026-08-10T09:55:18.375Z

Link: CVE-2026-72530

cve-icon Vulnrichment

Updated: 2026-08-19T17:16:19.874Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-19T17:21:01.130

Modified: 2026-08-21T04:18:15.903

Link: CVE-2026-72530

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-20T22:30:05Z

Weaknesses
  • CWE-94

    Improper Control of Generation of Code ('Code Injection')