Brand
TrueConf: actively exploited vulnerabilities
3 vulnerabilities in TrueConf products (Server, Client) are in CISA’s catalog of exploited vulnerabilities, 2 of them added in the last 90 days. Last added: August 20, 2026.
-
3 vulnerabilities added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one TrueConf category to your radar, or open its page.
- Collaboration, telephony and video conferencing 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single TrueConf product (Server, Client…) rather than the whole brand.
- Server2 vulnerabilities, Collaboration and video
- Client1 vulnerability, Collaboration and video
Name used by CISA: TrueConf. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this TrueConf list.
- Rank 1
TrueConf ServerCVE-2026-72529
TrueConf Server Missing Authentication for Critical Function Vulnerability
Hunt for compromise (CISA)
CVSS severity 9.8critical
Added Aug 20, 2026
- Rank 2
TrueConf ServerCVE-2026-72530
TrueConf Server Code Injection Vulnerability
CVSS severity 9.0critical
Added Aug 20, 2026
- Rank 3
TrueConf ClientCVE-2026-3502
TrueConf Client Download of Code Without Integrity Check Vulnerability
CVSS severity 7.8high
Added Apr 2, 2026
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.