Kaspersky ICS CERT

kaspersky-ics-cert · B · candidate

https://ics-cert.kaspersky.com/

researchvulnsot-icslang: enfetch failures: 0quiet periods: 0last fetch: 2026-08-23

Added 2026-08-23 as this run's single new candidate. Distinct team and portal from the already-tracked kaspersky-securelist (GReAT malware research): Kaspersky ICS CERT runs a CVE-coordination programme publishing per-vulnerability advisories with CVSS and affected-version detail, plus full exploitation write-ups. Primary source for this run's TrueConf Server entry (CVE-2026-72529/72530 and the Head Mare exploitation report) — ENISA's EUVD records Kaspersky as the assigning CNA for both. Rated B: original vulnerability coordination and research, not a first-party vendor authority for the affected product. Promote to active after 3 contributing runs.

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

CVE-2026-72529 and CVE-2026-72530 — a pre-auth chain on TrueConf Server's port 4307 reaches SYSTEM, and the operators use it to replace the client installer the server hands to everyone who joins a meeting2026-08-23