TrueConf Client Download of Code Without Integrity Check Vulnerability
High Listed in CISA KEV
Summary
TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- TrueConf:Client
Sources
- CISA KEV DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2026-3502 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
- https://trueconf.com/blog/update/trueconf-8-5 reference
- https://trueconf.com/downloads/windows.html reference
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV