https://patchfirst.co/vendor/trueconf/New and newly exploited TrueConf CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-72530/CVE-2026-72530#kevThu, 20 Aug 2026 00:00:00 GMTTrueConf · Server. In CISA KEV since 2026-08-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-72529/CVE-2026-72529#kevThu, 20 Aug 2026 00:00:00 GMTTrueConf · Server. In CISA KEV since 2026-08-20. ENISA EUVD lists it as exploited. EPSS 1.5% (higher than 73.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-3502/CVE-2026-3502#kevThu, 02 Apr 2026 00:00:00 GMTTrueConf · Client. In CISA KEV since 2026-04-02. ENISA EUVD lists it as exploited. EPSS 5.8% (higher than 93.2% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1557 Adversary-in-the-Middle; T1059 Command and Scripting Interpreter. Priority 72.1 of 100.kevpublic-exploitT1557T1059