CISA Urges Immediate Patching of Critical TrueConf Server Vulnerabilities

CISA has ordered federal agencies to urgently patch two critical TrueConf Server vulnerabilities (CVE-2026-72529, CVE-2026-72530) that allow unauthenticated remote code execution; the flaws have been actively exploited since July 2026 by the Head Mare hacktivist group targeting Russian organizations, were added to CISA's Known Exploited Vulnerabilities catalog on August 20, 2026, and must be remediated by September 3, 2026.