CVE-2026-3502 CISA KEV · Actively exploited
TrueConf Client Download of Code Without Integrity Check Vulnerability
CVSS score
—
EPSS probability
%0.3
Risk score
—
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
The code for personally reproducing the corresponding vulnerability
Makefile Go / Python
Scanner de CVE-2026-3502: detecta clientes TrueConf vulnerables e IOCs de TrueChaos. Reportes JSON/HTML/CSV.
Makefile Go / Python
PoC de CVE-2026-3502: hijacking de actualizacion en TrueConf Client para RCE (Operacion TrueChaos).
Makefile Go / Python
Similar Vulnerabilities
9.0
CVE-2026-72530 Actively exploited
Code injection in TrueConf Server
T
Patch status unknown Public Exploits:2EPSS %2
9.8
CVE-2026-72529 Actively exploited
Missing authentication in TrueConf Server
T
Patch status unknown Public Exploits:1EPSS %1
8.8
CVE-2017-20120
Cross-site request forgery in Trueconf Server
T
Patch status unknownEPSS %0
8.7
CVE-2025-66824
Cross-site scripting in Trueconf Server
T
Patch status unknown Public Exploits:1EPSS %0
7.3
CVE-2025-66834
Vulnerability in Trueconf Server
T
Patch status unknown Public Exploits:1EPSS %0
7.1
CVE-2025-66835
Vulnerability in Trueconf
T
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-3502"