CVE-2026-3502: TrueConf Client Download of Code Without Integrity Check Vulnerability

#trueconf #client #cybersecurity #vulnerability

CVE ID

CVE-2026-3502

Vulnerability Name

TrueConf Client Download of Code Without Integrity Check Vulnerability

Project: TrueConf
Product: Client

Date

Date Added: 2026-04-02
Due Date: 2026-04-16

Description

TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.