PT-2026-70005

Name of the Vulnerable Software and Affected Versions TrueConf Server versions 5.3.x through 5.3.9 TrueConf Server versions 5.4.x through 5.4.9 TrueConf Server versions 5.5.x through 5.5.5 TrueConf Server versions prior to 5.5.5 Description An issue exists where a remote unauthorized attacker wit...

PT-2026-86938

Уязвимость программного обеспечения TrueConf Server связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить токен с правами администратора...

TrueConf Server XSS

The vulnerability of the TrueConf Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

PT-2026-57925

Уязвимость программного обеспечения TrueConf Server связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, проводить межсайтовые сценарные атаки XSS...

PT-2026-57924

Уязвимость программного обеспечения TrueConf Server связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, проводить межсайтовые сценарные атаки XSS...

TrueConf Server XSS

The vulnerability of the TrueConf Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

TrueConf Server Create/Edit Conference Auth Bypass

The vulnerability of the “Create/Edit Conference” function in the TrueConf Server software is related to the lack of measures taken to protect the structure of the web page during the processing of the “meetingRoom” parameter. Exploiting this vulnerability can allow a malicious actor, operating...

TrueConf Server Create/Edit Conference Code Execution

The vulnerability of the “Create/Edit Conference” function in the TrueConf Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, provided that the user opens a specially...

TrueConf Server Database Code Execution

The vulnerability of the database component of the TrueConf Server software lies in the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

TrueConf Server Code Execution

The vulnerability of the application software interface of TrueConf Server is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-35566

Уязвимость метода программного обеспечения TrueConf Server связана с ошибками механизма обработки относительного пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании путем удаления произвольного файла...

PT-2026-35567

Уязвимость метода программного обеспечения TrueConf Server связана с недостаточной защитой служебных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, инициировать запрос от имени сервера...

TrueConf Server RCE

The vulnerability of the TrueConf Server software lies in errors in the mechanism for handling relative paths to the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2026-35565

Уязвимость метода программного обеспечения TrueConf Server связана с ошибками механизма обработки относительного пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

TrueConf Server Remote Trigger DoS

The vulnerability of the TrueConf Server software lies in errors related to the mechanism for handling relative paths to the directory. Exploiting this vulnerability could allow an attacker to cause a service failure by deleting any arbitrary file...

TrueConf Server Auth Bypass

The vulnerability of the TrueConf Server software lies in the insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to initiate requests on behalf of the server remotely...

CVE-2025-66823

An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page conference url/info...

CVE-2025-66834

A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name...

EUVD-2025-205848

An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page conference url/info...

EUVD-2025-205839

A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name...