Every CVE whose affected-product data names Rhubcom Turbomeeting, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2024-38287 — CVSS 9.8 (critical): The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers…
CVE-2024-38289 — CVSS 9.8 (critical): A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated…
CVE-2024-38288 — CVSS 7.2 (high): A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allows authenticated…