t
trueconf
Security Risk Profile
83
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 29, 2022 to present
20
Total CVEs
9
Critical+High
5
Exploited
9
Unpatched
Threat Assessment
Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
9
Critical/High
Risk Level
83/100
critical
⚠️ 5 Active Exploits⚡ 1 Zero-Days🆕 3Fresh (<7d)📈 3 in Last 30 Days
Severity Distribution
Critical
3High
6Medium
8Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
8
2
SQL Injection
2
3
Code Injection
1
4
CSRF
1
Most Affected Products
1. TrueConf Server17
2. TrueConf Trueconf Server Windows9
3. TrueConf Trueconf Server Linux Kernel6
4. TrueConf TrueConf Server5
5. TrueConf TrueConf Client2
Recent Vulnerabilities
See more →bleepingcomputer-20260821122533
unknown
CISA orders feds to patch actively exploited TrueConf Server flaws
Aug 21, 2026⚠ Exploited🔧 No Patch
CVE-2026-72530
CVSS 9.5critical
TrueConf Server Code Injection Vulnerability
Aug 19, 2026⚠ Exploited🔧 No Patch
CVE-2026-72529
CVSS 9.3critical
TrueConf Server Missing Authentication for Critical Function Vulnerability
Aug 19, 2026⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/hackers-exploit-trueconf-zero-day-to-push-malicious-software-updates/
unknown
Hackers exploit TrueConf zero-day to push malicious software updates
Apr 1, 2026⚠ Exploited⚡ Zero-Day🔧 No Patch
https://reddit.com/r/cybersecurity/comments/1s9tv10/trueconf_zeroday_exploited_in_southeast_asia_to/
unknown
TrueConf Zero-Day Exploited in Southeast Asia to Push Havoc via Trusted Update Channel
Apr 1, 2026🔧 No Patch
CVE-2026-3502
CVSS 7.8EPSS 0%high
TrueConf Client Download of Code Without Integrity Check Vulnerability
Mar 30, 2026⚠ Exploited🔧 No Patch
CVE-2025-66835
CVSS 7.1high
Dec 30, 2025🔧 No Patch
CVE-2025-66834
CVSS 7.3high
Dec 30, 2025🔧 No Patch
CVE-2025-66824
CVSS 8.7high
Dec 30, 2025🔧 No Patch
CVE-2025-66823
CVSS 5.4medium
Dec 30, 2025🔧 No Patch
Monitor trueconf in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.