Server
No CISA KEV deadline is open. CISA last added a Server CVE on 20 Aug.
Tracked since 20 Aug · latest article Fri 21 Aug · RSS
Exploited, by due date
CSV downloadDeadlines passed
8 articles from 4 outlets since 20 Aug; the latest 66 days ago.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 21 Aug · 09:30 UTC | Security Affairs | CISA adds TrueConf Server CVEs to KEV, urges urgent patching |
| Fri 21 Aug · 07:50 UTC | SecurityWeek | CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities |
| Fri 21 Aug · 06:09 UTC | SecurityOnline | TrueConf Server bugs exposed as Android 17 tightens memory |
| Fri 21 Aug · 02:03 UTC | CISA | CISA KEV Lists CVE-2026-72530 TrueConf Server Code Injection Flaw |
| Fri 21 Aug · 02:03 UTC | CISA | CVE-2026-72529 exposes TrueConf Server auth bypass on port 4307 |
| Thu 20 Aug · 22:25 UTC | SecurityOnline | TrueConf Server bugs CVE-2026-72529/72530 let hackers run code |
| Thu 20 Aug · 18:10 UTC | CISA | Critical flaw in TrueConf Server lets hackers run code remotely |
| Thu 20 Aug · 18:08 UTC | CISA | CISA Adds CVE-2026-72530 to Known Exploited Vulnerabilities Catalogue |
Who reported 4 outlets, last 12 months
- CISA4
- SecurityOnline2
- SecurityWeek1
- Security Affairs1
- CISA adds TrueConf Server CVEs to KEV, urges urgent patchingSecurity Affairs
- CISA Urges Immediate Patching of Exploited TrueConf VulnerabilitiesSecurityWeek
- TrueConf Server bugs exposed as Android 17 tightens memorySecurityOnline
- CISA KEV Lists CVE-2026-72530 TrueConf Server Code Injection FlawCISA · official notice
- CVE-2026-72529 exposes TrueConf Server auth bypass on port 4307CISA · official notice
- TrueConf Server bugs CVE-2026-72529/72530 let hackers run codeSecurityOnline
- Critical flaw in TrueConf Server lets hackers run code remotelyCISA · official notice
- CISA Adds CVE-2026-72530 to Known Exploited Vulnerabilities CatalogueCISA · official notice
All CVEs in coverage
2How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.