Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/03/30 9:31 p.m.•32 views

EUVD-2026-17162

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code...

7.8CVSS6.4AI score0.00329EPSS
SaveExploits2References2
NVD
NVD
•added 2026/03/30 7:16 p.m.•43 views

CVE-2026-3502

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code...

7.8CVSS0.00329EPSS
SaveExploits2References3
attackerkb
attackerkb
•added 2026/03/30 6:05 p.m.•13 views

CVE-2026-3502

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code...

7.8CVSS6.4AI score0.00329EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2026/03/30 6:05 p.m.•132 views

CVE-2026-3502

The CVE-2026-3502 issue affects TrueConf Client where the update payload is downloaded and installed without integrity verification, allowing an attacker who controls the update path to substitute a tampered payload and potentially achieve arbitrary code execution in the updater process or user c...

7.8CVSS7.9AI score0.00329EPSS
SaveIn wildExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•4 views

CVE-2026-3502: Download of Code Without Integrity Check

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code...

7.8CVSS8AI score0.00329EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•22 views

PT-2026-29097

Name of the Vulnerable Software and Affected Versions TrueConf versions 8.1.0 through 8.5.2 Description TrueConf Client downloads application update code and applies it without performing integrity or authenticity verification. An attacker capable of influencing the update delivery path, such as ...

7.8CVSS6.5AI score0.00329EPSS
SaveExploits2References90
Rows per page
Query Builder