CVE-2025-56231

PoC —

CVSS 3.1

9.1 critical

EPSS

<1%p14

Published

Nov 5, 2025 (Nov 5, 2025)

Modified

Jul 5, 2026

Description

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.

Vendors: tonec
Products: internet download manager
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.