TI-2026-03017 Aliases CVE-2026-3502 GHSA-33r5-g5m3-5m79

TrueConf Client Update Integrity Verification Bypass

CRITICAL 93Exploited in the wildCWE-494Published 2026-03-30 · Updated 2026-04-03

Key facts

Attack vector: Adjacent network
Privileges required: High
User interaction: Required
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · Low
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-494.

Summary

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.

Why it matters now

Exploitation Active In CISA KEV since 2026-04-02CISA due date 2026-04-16

EPSS 0.05845 93rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Active
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
TrueConf	TrueConf Client	TrueConf Client versions 8.1.0 through 8.5.2	—	No fix listed	CNA

TrueConf Client VendorTrueConf Affected TrueConf Client versions 8.1.0 through 8.5.2 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:trueconf:trueconf::::::windows::*	before 8.5.3.884	Vulnerable	TrueConf

cpe:2.3:a:trueconf:trueconf:*:*:*:*:*:windows:*:* Versions before 8.5.3.884 Vulnerable ·TrueConf

Remediation

No fixed version listed by the sources yet.

Timeline

2026-04-02 Added to CISA KEV
2026-10-02 Threatist record created from CVE-2026-3502
2026-10-03 Alias added: GHSA-33r5-g5m3-5m79
2026-10-25 EPSS moved to the 90th–95th percentile

References

Advisory 1

https://research.checkpoint.com/2026/operation-truechaos-0-day-exploitation-against-southeast-asian-government-targets/

Other 1

https://trueconf.com/blog/update/trueconf-8-5

TI-2025-41060 TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local… CVSS 3.1HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences