Threat intelligence / Vulnerability
CVE-2026-3502
TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.
Vulnerability
TypeVulnerability
External ID—
First seen2026-04-02
Last seen2026-04-02
Confidence
—
TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.
Labels
CISA KEV context
Vendor / productTrueConf Client
Added2026-04-02
Due date2026-04-16
13 recorded
Relationships
2 external