CVE-2026-3502 | BDVDB-2026-323650 Detail

Description#

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-03-30Record published in the CVE List.
2. Version 22026-04-03Most recent update recorded in the CVE List.