Skip to content
COOEY

FAIL › dossier

TrueConf

VENDOR

· dossier confidence 50%

TrueConf is a video conferencing vendor with a concerning security track record, recently suffering multiple high-severity remote code execution vulnerabilities in both its server and client software that suggest systemic weaknesses in input validation, update integrity, and authentication.

Failure events
3
Zero-days
0
RCEs
3
On KEV
3
Critical
0
Worst shame
85
PROFILE
Categoryvideo conferencing softwareWhat they doTrueConf provides video conferencing and collaboration software for businesses and organizations.
SECURITY POSTURE

The company has a poor security posture, evidenced by multiple high-severity remote code execution vulnerabilities in both its server and client software within a short timeframe, indicating systemic flaws in input validation, update integrity checks, and authentication mechanisms.

Notable failures
  • CVE-2026-72530: RCE via code injection on TrueConf Server
  • CVE-2026-3502: RCE via tampered update payloads on TrueConf Client
  • CVE-2026-72529: RCE via unauthenticated critical function on TrueConf Server
Patterns: repeated unpatched RCEs in server and client components; lack of integrity checks on update payloads; missing authentication on critical server functions
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2026-08-20 CVE-2026-72530 high TrueConf Server allows remote code execution via a code injection flaw on port 4307/TCP, enabling attackers to break isolation and execute arbitrary code on the host.
2026-04-02 CVE-2026-3502 high TrueConf Client allows attackers to inject tampered update payloads without integrity checks, enabling arbitrary code execution.
2026-08-20 CVE-2026-72529 high TrueConf Server lacks authentication on a critical function, allowing remote attackers to execute arbitrary scripts via port 4307/TCP.
Open questions: What is the exact founding year of TrueConf? · What is the precise headquarters location of TrueConf? · What is the current employee count of TrueConf? · What is the ownership structure of TrueConf?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-21 03:56:35.831511+00:00