TS
Product
TrueConf Server
On CISA KEVExploited in the wild
6
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 1Low 0
Watch
Add TrueConf Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-72529 In wildKEV | 9.8 | Aug 19 | TrueConf Server Missing Authentication for Critical Function Vulnerability Affected: before 5.3; 5.3 before 5.3.9; 5.4 before 5.4.9; 5.5 before 5.5.5 |
| CVE-2026-72530 In wildKEV | 9.0 | Aug 19 | TrueConf Server Code Injection Vulnerability Affected: before 5.3; 5.3 before 5.3.9; 5.4 before 5.4.9; 5.5 before 5.5.5 |
| CVE-2017-20120 | 8.8 | Jun 29 | A vulnerability classified as problematic was found in TrueConf Server 4.3.7 Affected: 4.3.7.12219; 4.3.7.12255 |
| CVE-2025-66824 | 8.7 | Dec 30 | A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813 Affected: 5.5.2.10813 |
| CVE-2025-66834 | 7.3 | Dec 30 | A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display… Affected: 5.5.2.10813 |
| CVE-2025-66823 | 5.4 | Dec 30 | An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference… Affected: 5.5.2.10813 |
Showing 6