Vulnerabilities

CVSS

7.8 High

Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L

Risk score

100.0

Known exploited

CISA KEV

Published

2026-03-30

Status

Published

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.

Weaknesses

CWE-494

Coverage 1

threat-intel

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

Russian cybersecurity vendor TrueConf has been repeatedly targeted by the threat actor known as Head Mare, who leverages zero-day vulnerabilities in their server software to deploy a backdoor (PhantomCore) and a related…

The Hacker News · Aug 10, 2026 High

CVE-2026-3502CHRUzero-dayaptbackdoor

All articles mentioning it

Advisories and references

• trueconf.com/blog/update/trueconf-8-5
• research.checkpoint.com/2026/operation-truechaos-0-day-exploitation-...
• cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-...