ZeusQA
Start free

Known exploited vulnerabilities

TrueConf vulnerabilities attackers have used

Every TrueConf vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 TrueConf vulnerabilities as exploited in the wild, 3 of them added in the last 12 months. The most recent is CVE-2026-72530, added Aug 20, 2026. Server has the most entries (2).

In KEV, all time
3
Added, last 12 months
3
Used in ransomware
0
New CVEs this week
0

By product

Server (2), Client (1).

Every TrueConf entry in CISA KEV

  1. CVE-2026-72530

    Added · due

    TrueConf Server Code Injection Vulnerability

    TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary…

  2. CVE-2026-72529

    Added · due

    TrueConf Server Missing Authentication for Critical Function Vulnerability

    TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.

  3. CVE-2026-3502

    Added · due

    TrueConf Client Download of Code Without Integrity Check Vulnerability

    TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works