PT-2026-29097 · Trueconf · Trueconf Client

Published 2026-03-30 · Updated 2026-03-30 · CVE-2026-3502

Mitre

CVSS v3.1

7.8

High

AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.

Fix

Weakness Enumeration

CWE-494

Related Identifiers

CVE-2026-3502

Affected Products

Trueconf Client

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-3502 · Security Note
• https://trueconf.com/blog/update/trueconf-8-5 · Note