CISA Adds Two Known Exploited Vulnerabilities to Catalog

{"#TrueConfServerMissingAuthenticationForCriticalFunctionVulnerability":["The TrueConf Server missing authentication vulnerability allows attackers to bypass security measures, granting them access to critical functions. The article notes that this is a CVE-2026-72529 and provides mitigation guidance.","This vulnerability has been exploited in the wild, indicating its significance as an active threat. CISA recommends agencies take immediate action to address this issue.","The BOD 26-04 directive emphasizes the importance of prioritizing high-risk vulnerabilities like CVE-2026-72529 and requires swift remediation for publicly exposed assets that grant full control post-exploitation."],"#TrueConfServerCodeInjectionVulnerability":["CVE-2026-72530 represents a code injection vulnerability in the TrueConf Server, which can be exploited to execute arbitrary commands. The article highlights this as an active threat and provides mitigation guidance.","This vulnerability has also been exploited, making it critical for agencies to address promptly. CISA recommends following BOD 26-04 guidelines for remediation.","The directive further stresses the importance of checking if threat actors have compromised systems before applying patches."]}