Search: “TrueConf”

U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

CISA added two exploited TrueConf Server flaws (CVE-2026-72529, CVE-2026-72530) to its KEV catalog with federal patch deadlines.

CISA added two TrueConf Server vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-72529 (CVSS 9.3), a missing-authentication remote code execution flaw reachable on TCP port 4307, and CVE-2026-72530 (CVSS 9.5), a sandbox escape allowing code execution on the underlying host. Both flaws affect TrueConf Server versions 5.3.x through 5.5.5 and earlier, and were discovered by Vyacheslav Kopeytsev of Kaspersky ICS CERT. Under BOD 22-01, federal civilian agencies must patch CVE-2026-72529 by August 23, 2026, and CVE-2026-72530 by September 2, 2026.

Security Affairs·Aug 21, 08:22 UTC · 26d agoExploit / PoC in the wildCVE-2026-72529CVE-2026-72530

U.S. CISA adds a flaw in TrueConf Client to its Known Exploited Vulnerabilities catalog

Security Affairs·Apr 4, 16:43 UTC · Apr 4, 2026Exploit / PoC in the wildCVE-2026-3502

TrueConf zero-day vulnerability exploited to target government networks

Help Net Security·Apr 2, 00:00 UTC · Apr 2, 2026Exploit / PoCCVE-2026-3502

TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks

The Hacker News·Apr 2, 19:20 UTC · Apr 2, 2026Exploit / PoC in the wildCVE-2026-3502

Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited

Help Net Security·Apr 5, 00:00 UTC · Apr 5, 2026Exploit / PoC in the wildCVE-2026-35616CVE-2026-21643CVE-2026-20093+2 CVEs1