[ Vendor · 3 CVEs ]
TrueConf
CVEs affecting TrueConf published in the last 30 days, plus any TrueConf CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-72530 | 19 Aug 2026 | CVSS 9.0 | TrueConf Server Code InjectionA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5… | Exploited |
| CVE-2026-72529 | 19 Aug 2026 | CVSS 9.8 | TrueConf Server Missing Authentication for Critical FunctionA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5… | Exploited |
| CVE-2026-3502 | 30 Mar 2026 | CVSS 7.8 | TrueConf Client Download of Code Without Integrity CheckTrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update… | Exploited |