Client
No CISA KEV deadline is open. CISA last added a Client CVE on 2 Apr.
Tracked since 31 Mar · latest article Sat 4 Apr · RSS
Exploited, by due date
CSV downloadDeadlines passed
6 articles from 5 outlets since 31 Mar; the latest 205 days ago.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Sat 4 Apr · 17:08 UTC | Security Affairs | CISA orders patch for TrueConf CVE-2026-3502 by April |
| Fri 3 Apr · 13:01 UTC | SecurityWeek | Chinese Actors Exploit TrueConf Zero Day Flaw in Govt Attacks |
| Thu 2 Apr · 21:34 UTC | CISA | CISA Adds CVE-2026-3502 to Known Exploited Vulnerabilities Catalogue |
| Thu 2 Apr · 21:29 UTC | CISA | CISA Adds CVE-2026-3502 to Known Exploited Vulnerabilities Catalogue |
| Tue 31 Mar · 16:48 UTC | The Hacker News | TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks |
| Tue 31 Mar · 13:27 UTC | Check Point | Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets |
Who reported 5 outlets, last 12 months
- CISA2
- Check Point1
- The Hacker News1
- SecurityWeek1
- Security Affairs1
- CISA orders patch for TrueConf CVE-2026-3502 by AprilSecurity Affairs
- Chinese Actors Exploit TrueConf Zero Day Flaw in Govt AttacksSecurityWeek
- CISA Adds CVE-2026-3502 to Known Exploited Vulnerabilities CatalogueCISA · official notice
- CISA Adds CVE-2026-3502 to Known Exploited Vulnerabilities CatalogueCISA · official notice
- TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government NetworksThe Hacker News
- Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government TargetsCheck Point
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.