Trueconf Trueconf Server — known CVE vulnerabilities

Every CVE whose affected-product data names Trueconf Trueconf Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2026-72529 — CVSS 9.8 (critical) — actively exploited: A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X…
• CVE-2026-72530 — CVSS 9.0 (critical) — actively exploited: A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X…
• CVE-2025-66824 — CVSS 8.7 (high): A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in…
• CVE-2025-66834 — CVSS 7.3 (high): A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into…
• CVE-2025-66823 — CVSS 5.4 (medium): An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary…
• CVE-2017-20120 — CVSS 4.3 (medium): A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file…