CVE-2026-3502
HIGH KEVTrueConf Client Update Integrity Verification Bypass
Title source: cnaExploitation Summary
CVE-2026-3502 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added April 2, 2026. EIP tracks 3 public exploits from researchers including adminlove520, fevar54.
AI-analyzed exploit summary The repository contains a vulnerability checker for CVE-2026-3502, which detects whether a TrueConf server or client is vulnerable to update hijacking. It includes checks for server endpoints, client versions, and indicators of compromise (IOCs).
Description
TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.
Exploits (3)
The repository contains a vulnerability checker for CVE-2026-3502, which detects whether a TrueConf server or client is vulnerable to update hijacking. It includes checks for server endpoints, client versions, and indicators of compromise (IOCs).
This repository contains a Python-based vulnerability detection tool for CVE-2026-3502, targeting TrueConf software. It includes modules for scanning local client installations, checking versions, and detecting indicators of compromise (IOCs) associated with the TrueChaos operation.
The repository contains a Python-based vulnerability checker for CVE-2026-3502, which targets TrueConf Client's update mechanism. It includes detection logic for vulnerable servers and clients, as well as indicators of compromise (IOCs) but does not include functional exploit code.
References (3)
Scores
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L