Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:trueconf:trueconf_server:*:*:*:*:*:linux_kernel:*:*

2 briefs RSS
critical threat

Active Exploitation of TrueConf Server Vulnerabilities

TrueConf Server versions 5.3.x, 5.4.x, and 5.5.x are vulnerable to CVE-2026-72529 and CVE-2026-72530, which are currently being exploited in the wild according to CISA KEV.

exploited TrueConf Server 5.3 +2
2c updated
high threat

Head Mare APT Exploiting TrueConf Server Vulnerabilities to Deploy PhantomCore and PhantomGraph

The Head Mare APT group is exploiting a chain of vulnerabilities in TrueConf Server to achieve remote code execution as SYSTEM and distribute backdoored installer packages to victims.

TrueConf Server Head Mare
1r 3t 2c updated