AI Summary

CISA announced that two new vulnerabilities have been added to its Known Exploited Vulnerabilities (KEV) Catalog after confirming active exploitation. The entries are CVE‑2026‑72529, a missing‑authentication flaw in TrueConf Server’s critical function, and CVE‑2026‑72530, a code‑injection issue in the same product. Under Binding Operational Directive 26‑04, federal agencies must prioritize rapid remediation of these high‑risk CVEs on publicly exposed assets that could give attackers total control. The directive also sets expectations for agencies to verify whether systems were compromised before applying patches.

AI summaries can be wrong sometimes—always verify important details using the source article.