TrueConf
Vulnerability activity for TrueConf: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 2
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 2
- With exploit code
- 0
Last 365 days
- CVEs
- 3
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 3
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 9.8CriticalAug 20, 2026TrueConf Server Auth bypass / access controlCVE-2026-72529TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.Added to KEV Aug 20, 2026Exploited1.5% likely
- 9.0CriticalAug 20, 2026TrueConf Server Code / command injectionCVE-2026-72530TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.Added to KEV Aug 20, 2026Exploited1.7% likely
- 7.8HighApr 2, 2026TrueConf ClientCVE-2026-3502TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.Added to KEV Apr 2, 2026Exploited
Recent
- 9.0CriticalAug 20, 2026TrueConf Server Code / command injectionCVE-2026-72530TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.Exploited1.7% likely
- 9.8CriticalAug 20, 2026TrueConf Server Auth bypass / access controlCVE-2026-72529TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.Exploited1.5% likely
- 7.8HighApr 2, 2026TrueConf ClientCVE-2026-3502TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.Exploited
Top products
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.