VENDOR

TrueConf vulnerabilities: CVEs, exploitation and patches

Every TrueConf CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-72530
TrueConf Server code injection allows remote unauthenticated code execution TrueConf Server · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PoC PUBLIC
- PATCH AVAILABLE
CRITICAL 9
CVE-2026-72529
TrueConf Server missing-authentication remote script execution via port 4307 TrueConf Server · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PATCH AVAILABLE
CRITICAL 9.8