Product by TrueConf
TrueConf Server
8 known vulnerabilities in TrueConf Server (TrueConf), 2 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-72530 | TrueConf Server Code Injection Vulnerability In CISA KEV | 9.0 | |
| Critical | CVE-2026-72529 | TrueConf Server Missing Authentication for Critical Function Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2022-46764 | TrueConf Server: SQL Injection | 9.8 | |
| High | CVE-2022-46763 | TrueConf Server: SQL Injection | 8.8 | |
| High | CVE-2025-66824 | TrueConf Server: Cross-Site Scripting (XSS) | 8.7 | |
| High | CVE-2025-66834 | TrueConf Server: security vulnerability | 7.3 | |
| Medium | CVE-2025-66823 | TrueConf Server: security vulnerability | 5.4 | |
| High | CVE-2017-20120 | TrueConf Server cross-site request forgery | 4.3 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail,
- KEV: Oracle, Zimbra, TrueConfsans-newsbites-mail,