- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Severity across 13 analyzed records
The GCVE catalog currently lists 17 vulnerability records associated with TrueConf.
Among the 13 records analyzed by CyStack, 5 are High or Critical and 3 appear in the CISA KEV catalog for priority remediation.
Global video conferencing provider known for on‑premises and hybrid deployments, offering TrueConf Server as a self‑hosted solution for enterprise communication and scalable conferences. Research indicates the company maintains a multinational footprint with a range of server and client tooling for large organizations.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-72530CVE-2026-72530 | Exploitation statusKEV | FixYes | Affected productTrueConf Server | Published08/19/2026 | SeverityCritical |
CVE-2026-72529CVE-2026-72529 | Exploitation statusKEV | FixYes | Affected productTrueConf Server | Published08/19/2026 | SeverityCritical |
CVE-2026-3502TrueConf Client Update Integrity Verification Bypass | Exploitation statusKEV | FixNot confirmed | Affected productTrueConf Client | Published03/30/2026 | SeverityHigh |
CVE-2025-66835CVE-2025-66835 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published12/30/2025 | SeverityHigh |
CVE-2025-66834CVE-2025-66834 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published12/30/2025 | SeverityHigh |
CVE-2025-66824CVE-2025-66824 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published12/30/2025 | SeverityHigh |
CVE-2025-66823CVE-2025-66823 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published12/30/2025 | SeverityLow |
CVE-2022-46763CVE-2022-46763 | Exploitation statusNot known exploited | FixYes | Affected productTrueConf Server | Published12/27/2022 | SeverityHigh |
CVE-2022-46764CVE-2022-46764 | Exploitation statusNot known exploited | FixYes | Affected productTrueConf Server | Published12/27/2022 | SeverityCritical |
CVE-2017-20120TrueConf Server cross-site request forgery | Exploitation statusNot known exploited | FixNot confirmed | Affected productServer | Published06/29/2022 | SeverityMedium |
CVE-2017-20119TrueConf Server change-lang redirect | Exploitation statusPublic exploit | FixNot confirmed | Affected productServer | Published06/29/2022 | SeverityLow |
CVE-2017-20118TrueConf Server DOM cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productServer | Published06/29/2022 | SeverityLow |
CVE-2017-20117TrueConf Server group DOM cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productServer | Published06/29/2022 | SeverityLow |
CVE-2017-20116TrueConf Server Reflected cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productServer | Published06/29/2022 | SeverityLow |
CVE-2017-20115TrueConf Server Reflected cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productServer | Published06/29/2022 | SeverityLow |
CVE-2017-20114TrueConf Server Reflected cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productServer | Published06/29/2022 | SeverityLow |
CVE-2017-20113TrueConf Server Stored cross site scripting | Exploitation statusPublic exploit | FixNot confirmed | Affected productServer | Published06/29/2022 | SeverityLow |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
