Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: TrueConf Server 5.3, 5.3.9 and 2 more versions Clear all filters
TI-2026-50790 CVE-2026-72530 · GHSA-f8q9-f337-2p3r

Code injection in TrueConf Server

Priority CRITICAL 100KEV

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the is…

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.01686 Published 2026-08-19 Fixed in 5.3.9, 5.4.9 +1 CWE-94
TI-2026-50789 CVE-2026-72529 · GHSA-xc2x-q39j-746f

Missing authentication in TrueConf Server

Priority CRITICAL 99KEV

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumente…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01464 Published 2026-08-19 Fixed in 5.3.9, 5.4.9 +1 CWE-306