CVE-2026-3502 TrueConf TrueConf Client
TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater,…
- CVSS
- 7.8 High
- EPSS
- 5.9%
- Percentile
- 93
- Published
- 2026-03-30
- Force
- 10 of 12
- Public PoC
- 2
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L
On CISA’s exploited list
TrueConf Client Download of Code Without Integrity Check Vulnerability
- Added
- 2026-04-02
- Federal patch deadline
- 2026-04-16
- Ransomware use
- not known