# cve.now: TrueConf

The newest entries naming TrueConf as an affected vendor (up to 200), of 13 in all, 3 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-72530](https://cve.now/CVE-2026-72530.md): A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t (CVSS 9.5, KEV)
- [CVE-2026-72529](https://cve.now/CVE-2026-72529.md): A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t (CVSS 9.3, KEV)
- [CVE-2026-3502](https://cve.now/CVE-2026-3502.md): TrueConf Client Update Integrity Verification Bypass (CVSS 7.8, KEV)
- [CVE-2022-46764](https://cve.now/CVE-2022-46764.md): A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execut (CVSS 9.8)
- [CVE-2022-46763](https://cve.now/CVE-2022-46763.md): A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database u (CVSS 8.8)
- [CVE-2017-20120](https://cve.now/CVE-2017-20120.md): TrueConf Server cross-site request forgery (CVSS 4.3)
- [CVE-2017-20119](https://cve.now/CVE-2017-20119.md): TrueConf Server change-lang redirect (CVSS 3.5)
- [CVE-2017-20118](https://cve.now/CVE-2017-20118.md): TrueConf Server DOM cross site scripting (CVSS 3.5)
- [CVE-2017-20117](https://cve.now/CVE-2017-20117.md): TrueConf Server group DOM cross site scripting (CVSS 3.5)
- [CVE-2017-20116](https://cve.now/CVE-2017-20116.md): TrueConf Server Reflected cross site scripting (CVSS 3.5)
- [CVE-2017-20115](https://cve.now/CVE-2017-20115.md): TrueConf Server Reflected cross site scripting (CVSS 3.5)
- [CVE-2017-20114](https://cve.now/CVE-2017-20114.md): TrueConf Server Reflected cross site scripting (CVSS 3.5)
- [CVE-2017-20113](https://cve.now/CVE-2017-20113.md): TrueConf Server Stored cross site scripting (CVSS 3.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/trueconf
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.