TrueConf vulnerabilities
13 CVEs and advisories name TrueConf as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72530A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t
- CVE-2026-72529A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t
- CVE-2026-3502TrueConf Client Update Integrity Verification Bypass
- CVE-2022-46764A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execut
- CVE-2022-46763A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database u
- CVE-2017-20120TrueConf Server cross-site request forgery
- CVE-2017-20119TrueConf Server change-lang redirect
- CVE-2017-20118TrueConf Server DOM cross site scripting
- CVE-2017-20117TrueConf Server group DOM cross site scripting
- CVE-2017-20116TrueConf Server Reflected cross site scripting
- CVE-2017-20115TrueConf Server Reflected cross site scripting
- CVE-2017-20114TrueConf Server Reflected cross site scripting
- CVE-2017-20113TrueConf Server Stored cross site scripting