sign in--:--:--UTC

CVE-2026-3502

exploited in the wild☆ pin

CVSS

7.8

Reports

5

First seen

Mar 31, 2026

Last seen

Aug 21, 2026

Affected product

TrueConf Windows client versions before 8.5.3

Associated actors

Head Mare ×3 Chinese threat actors (Operation True Chaos) ×1 Iran-nexus actors ×1 TrueChaos ×1 Unknown Chinese-nexus actor ×1 Unknown Chinese-speaking APT ×1

Recent reports

CISA Orders Federal Agencies to Patch Actively Exploited TrueConf Server Flaws

Bleeping ComputerAug 21, 2026 High

Head Mare and Chinese APT Exploit TrueConf and ViPNet Flaws to Deploy Backdoors in Russian Organizations

The Hacker NewsAug 10, 2026 Critical

Head Mare exploits TrueConf vulnerabilities to trojanize client installers with backdoors

Bleeping ComputerAug 8, 2026 High

Weekly Threat Intelligence Report – 6 April

Check Point ResearchApr 6, 2026 Critical

Operation TrueChaos: Zero-Day in TrueConf Video Conferencing Exploited Against Southeast Asian Governments

Check Point ResearchMar 31, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans