Trueconf: community verdicts

1 notable / known-exploited Trueconf CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Trueconf CVE, see NVD ↗.

CVE-2026-3502HIGH 7.8KEVEPSS 6%
TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.