{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/trueconf-server-4.7.2--v--5.5.6/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-123040"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["TrueConf Server (4.7.2 \u003c= v \u003c 5.5.6)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["TrueConf"],"content_html":"\u003cp\u003eCVE-2026-123040 is a security vulnerability in TrueConf Server for Linux that permits a local privilege escalation. An attacker who has already successfully executed arbitrary code as the trueconf user can abuse this flaw to obtain root privileges. This vulnerability impacts TrueConf Server versions 4.7.2 up to, but not including, 5.5.6.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in full root access to the underlying Linux system, granting an attacker complete control over the server environment, including the ability to modify, delete, or exfiltrate sensitive data and manipulate system configurations.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate TrueConf Server to version 5.5.6 or later on all affected Linux installations to remediate CVE-2026-123040.\u003c/li\u003e\n\u003cli\u003eConduct an inventory of all TrueConf Server instances to identify vulnerable versions 4.7.2 through 5.5.5.\u003c/li\u003e\n\u003cli\u003eReview system logs for signs of unauthorized access or suspicious process execution by the trueconf user account.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T17:59:34Z","date_published":"2026-11-11T17:59:34Z","id":"https://feed.craftedsignal.io/briefs/2026-11-trueconf-privesc-cve-2026-123040/","summary":"CVE-2026-123040 is a local privilege escalation vulnerability in TrueConf Server for Linux, allowing an attacker already running code as the trueconf user to elevate privileges to root.","title":"TrueConf Server: Local privilege escalation (CVE-2026-123040)","url":"https://feed.craftedsignal.io/briefs/2026-11-trueconf-privesc-cve-2026-123040/"}],"language":"en","title":"CraftedSignal Threat Feed - TrueConf Server (4.7.2 \u003c= v \u003c 5.5.6)","version":"https://jsonfeed.org/version/1.1"}