Known Exploited Vulnerabilities April 02, 2026 · CISA KEV Catalog

CVE-2026-3502: True Conf Client Download of Code Without Integrity Check Vulnerability

TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-3502 TrueConf
Related: CVE-2026-72529: True Conf Server Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Aug 20, 2026
CVE-2026-72530: True Conf Server Code Injection Vulnerability Known Exploited Vulnerabilities · Aug 20, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026