Active Exploitation of TrueConf Server Vulnerabilities

TrueConf has issued a security advisory regarding multiple vulnerabilities affecting the TrueConf Server software suite. The affected versions include 5.3.x (prior to 5.3.9), 5.4.x (prior to 5.4.9), and 5.5.x (prior to 5.5.5). On August 20, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added these vulnerabilities, tracked as CVE-2026-72529 and CVE-2026-72530, to its Known Exploited Vulnerabilities (KEV) catalog. This designation confirms that threat actors are actively exploiting these flaws in real-world environments. Organizations running TrueConf Server are urged to update to the latest available versions immediately to mitigate the risk of unauthorized access or exploitation.

Impact

Successful exploitation of these vulnerabilities allows unauthorized actors to compromise TrueConf Server instances, which may lead to full system takeover, unauthorized access to internal communications, or data exfiltration. Given the inclusion of these CVEs in the CISA KEV, all internet-facing TrueConf Server instances are at immediate risk of compromise.

Recommendation

• Immediately audit all internet-facing TrueConf Server instances to identify affected versions (5.3.x < 5.3.9, 5.4.x < 5.4.9, 5.5.x < 5.5.5).
• Apply the vendor-provided patches as detailed in the TrueConf Security Advisories page.
• Prioritize patching any TrueConf Server instances accessible from the public internet.
• Review network access logs for unusual patterns originating from or directed toward TrueConf Server infrastructure.