CyberSIXT Search
Vendor

TrueConf

No CISA KEV deadline is open. CISA last added a TrueConf CVE on 20 Aug.

Tracked since 31 Mar · latest article Fri 21 Aug · RSS

Added to KEV · 90 days
2
of 3 in the full CISA catalogue · all time
High exploit odds · current
0
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2026-72529Server20 AugDeadline passed 23 Aug6 articles
CVE-2026-72530Server20 AugDeadline passed 3 Sep6 articles
CVE-2026-3502Client2 AprDeadline passed 16 Apr6 articles

Products

2 products · 3 CVEs in coverage
Server2 CVEs · 2 in KEVlatest 21 AugClient1 CVE · 1 in KEVlatest 4 Apr

Coverage

14 articles · all timeFull timeline

14 articles from 6 outlets since 31 Mar; the latest 66 days ago.

TrueConf: coverage over time14 articles from 6 outlets. First report 31 Mar by Check Point. Busiest week: 8 articles, week of 17 Aug. 0 in the last 7 days. TrueConf: coverage over time14 articles from 6 outlets. First report 31 Mar by Check Point. Busiest week: 8 articles, week of 17 Aug. 0 in the last 7 days.
  • Article
  • First report
  • Official notice
Show as table
TrueConf: articles
Published (UTC)OutletHeadline
Fri 21 Aug · 09:30 UTCSecurity AffairsCISA adds TrueConf Server CVEs to KEV, urges urgent patching
Fri 21 Aug · 07:50 UTCSecurityWeekCISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities
Fri 21 Aug · 06:09 UTCSecurityOnlineTrueConf Server bugs exposed as Android 17 tightens memory
Fri 21 Aug · 02:03 UTCCISACISA KEV Lists CVE-2026-72530 TrueConf Server Code Injection Flaw
Fri 21 Aug · 02:03 UTCCISACVE-2026-72529 exposes TrueConf Server auth bypass on port 4307
Thu 20 Aug · 22:25 UTCSecurityOnlineTrueConf Server bugs CVE-2026-72529/72530 let hackers run code
Thu 20 Aug · 18:10 UTCCISACritical flaw in TrueConf Server lets hackers run code remotely
Thu 20 Aug · 18:08 UTCCISACISA Adds CVE-2026-72530 to Known Exploited Vulnerabilities Catalogue
Sat 4 Apr · 17:08 UTCSecurity AffairsCISA orders patch for TrueConf CVE-2026-3502 by April
Fri 3 Apr · 13:01 UTCSecurityWeekChinese Actors Exploit TrueConf Zero Day Flaw in Govt Attacks
Thu 2 Apr · 21:34 UTCCISACISA Adds CVE-2026-3502 to Known Exploited Vulnerabilities Catalogue
Thu 2 Apr · 21:29 UTCCISACISA Adds CVE-2026-3502 to Known Exploited Vulnerabilities Catalogue
Tue 31 Mar · 16:48 UTCThe Hacker NewsTrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks
Tue 31 Mar · 13:27 UTCCheck PointOperation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets

Who reported 6 outlets, last 12 months

  • CISA6
  • SecurityWeek2
  • Security Affairs2
  • SecurityOnline2
  • Check Point1
  • The Hacker News1
  1. CISA adds TrueConf Server CVEs to KEV, urges urgent patchingSecurity Affairs
  2. CISA Urges Immediate Patching of Exploited TrueConf VulnerabilitiesSecurityWeek
  3. TrueConf Server bugs exposed as Android 17 tightens memorySecurityOnline
  4. CISA KEV Lists CVE-2026-72530 TrueConf Server Code Injection FlawCISA · official notice
  5. CVE-2026-72529 exposes TrueConf Server auth bypass on port 4307CISA · official notice
  6. TrueConf Server bugs CVE-2026-72529/72530 let hackers run codeSecurityOnline
  7. Critical flaw in TrueConf Server lets hackers run code remotelyCISA · official notice
  8. CISA Adds CVE-2026-72530 to Known Exploited Vulnerabilities CatalogueCISA · official notice
  9. CISA orders patch for TrueConf CVE-2026-3502 by AprilSecurity Affairs
  10. Chinese Actors Exploit TrueConf Zero Day Flaw in Govt AttacksSecurityWeek

Named in the same articles

Threat actors · articles in common
Head Mare 1

All CVEs in coverage

3
CVE-2026-3502TrueConf Client Download of Code Without Integrity Check VulnerabilityCVSS7.8HighExploited5.6%EPSS6articles
CVE-2026-72530TrueConf Server Code Injection VulnerabilityCVSS9.5CriticalExploited1.7%EPSS6articles
CVE-2026-72529TrueConf Server Missing Authentication for Critical Function VulnerabilityCVSS9.8CriticalExploited1.5%EPSS6articles
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device