CISA orders feds to patch actively exploited TrueConf Server flaws
Teaser from the source
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on TrueConf
Other advisories
- CriticalCVE-2026-72530TrueConf Server: TrueConf Server Code Injection Vulnerability
- CriticalCVE-2026-72530trueconf_server: Code-Injection
- CriticalCVE-2026-72530trueconf_server: Code-Injection
- CriticalCVE-2026-72529TrueConf Server: fehlende Authentifizierung für kritische Funktion
- CriticalCVE-2026-72529TrueConf Server: fehlende Authentifizierung für kritische Funktion
- CriticalCVE-2026-3502Der TrueConf-Client lädt den Anwendungsaktualisierungscode herunter und wendet ihn an, ohne eine Überprüfung durchzuführen.
- CriticalCVE-2026-3502TrueConf Client enthält eine Schwachstelle beim Download von Code ohne Integritätsprüfung.
- HighCVE-2025-66824TrueConf Server: Cross-Site-Scripting (XSS)
Other news entries
- Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using itNewsThe Register — Security
- CISA Urges Immediate Patching of Exploited TrueConf VulnerabilitiesNewsSecurityWeek
- KEV: Oracle, Zimbra, TrueConfVulnerabilitySANS NewsBites
- TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCoreNewsThe Hacker News
- Hackers breach TrueConf to trojanize client installers with backdoorsNewsBleepingComputer
- TrueConf Vulnerability Added to KEV; Check Point Observed Exploits Starting in JanuaryVulnerabilitySANS NewsBites
ID