{
  "id": "CVE-2026-72530",
  "vendor_project": "TrueConf",
  "product": "Server",
  "description": "TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.",
  "kev_date_added": "2026-08-20",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}