Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

TrueConf

Products: TrueConf Server

66.6

Score

2

CVEs

2

Active

0

PoC

2

KEV

#46

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-72529	2026-08-19	9.3v4.0	ACTIVE		Low	None	YES	40.6	TrueConf Server	A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.
CVE-2026-72530	2026-08-19	9.5v4.0	ACTIVE		High	None	no	26.0	TrueConf Server	A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3