TrueConf vulnerabilities
13 published CVEs name TrueConf among the affected products; CISA lists 3 of them as exploited in the wild.
- Published CVEs
- 13
- Last 12 months
- 3
- Critical
- 3
- Known exploited
- 3
Critical 3High 2Medium 1Low 7Not scored 0
CVEs per yearBy the year they were published
- 202210
- 20263
Known exploitedNewest addition to KEV first
- CVE-2026-72530
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and…
TrueConf · TrueConf Server
ExploitedCritical9.5 - CVE-2026-72529
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and…
TrueConf · TrueConf Server
ExploitedCritical9.3 - CVE-2026-3502
TrueConf Client Update Integrity Verification Bypass
TrueConf · TrueConf Client
ExploitedHigh7.8
Newest CVEs
- CVE-2026-72530
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and…
TrueConf · TrueConf Server
ExploitedCritical9.5 - CVE-2026-72529
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and…
TrueConf · TrueConf Server
ExploitedCritical9.3 - CVE-2026-3502
TrueConf Client Update Integrity Verification Bypass
TrueConf · TrueConf Client
ExploitedHigh7.8 - CVE-2022-46764
A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execute arbitrary SQL…
TrueConf · TrueConf Server
Critical9.8 - CVE-2022-46763
A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute…
TrueConf · TrueConf Server
High8.8 - CVE-2017-20120
TrueConf Server cross-site request forgery
TrueConf · Server
Medium4.3 - CVE-2017-20119
TrueConf Server change-lang redirect
TrueConf · Server
Low3.5 - CVE-2017-20118
TrueConf Server DOM cross site scripting
TrueConf · Server
Low3.5 - CVE-2017-20117
TrueConf Server group DOM cross site scripting
TrueConf · Server
Low3.5 - CVE-2017-20116
TrueConf Server Reflected cross site scripting
TrueConf · Server
Low3.5