TrueConf

Records17All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

TrueConf records in CISA KEV

TI-2026-50789 TrueConf Server Missing Authentication for Critical Function Vulnerability CRITICAL 99KEV 2026-08-20 TI-2026-50790 TrueConf Server Code Injection Vulnerability CRITICAL 100KEV 2026-08-20 TI-2026-03017 TrueConf Client Download of Code Without Integrity Check Vulnerability CRITICAL 93KEV 2026-04-02

Components

Products in the NVD configurations · select one to filter the records

Server 9 records MEDIUM Trueconf Server 6 records CRITICAL Trueconf 2 records CRITICAL

Records

2 records in Trueconf · all components

TI-2026-03017 CVE-2026-3502 · GHSA-33r5-g5m3-5m79

TrueConf Client Update Integrity Verification Bypass

CRITICAL 93KEV

TrueConf Client downloads application update code and applies it without performing verification.

CVSS 3.1HIGH 7.8 Adjacent network High privileges User interaction EPSS 0.05845 Published 2026-03-30 No fix listed CWE-494

TI-2025-41060 CVE-2025-66835 · GHSA-vrjf-962m-57c2

TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local…

HIGH 66

TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00183 Published 2025-12-30 No fix listed CWE-427

Open these records in search →