Monthly
Firmware updates for EnergizeLab AI Station, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 are delivered over plain HTTP without integrity or authenticity verification, allowing a network-adjacent attacker who can intercept traffic to substitute malicious updates and gain full control of the affected device or Windows host. The flaw is CWE-494 (download of code without integrity check), with a CVSS 3.1 base score of 7.5 (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning the attack is unauthenticated but requires an adjacent-network man-in-the-middle position and high complexity. No public exploit code or CISA KEV entry is identified in the provided data; exploitation depends on the attacker holding a MITM position, such as ARP spoofing, a rogue Wi-Fi access point, or a compromised router, and on an update check occurring.
URL validation bypass on the Eclipse Adoptium website (adoptium.net) lets an unauthenticated attacker craft a post-download link that passes the site's trusted-prefix check but resolves - after the browser's RFC 3986 dot-segment normalisation - to an arbitrary attacker-controlled repository, so a victim sees the genuine "Thank you for downloading Eclipse Temurin" page while their browser fetches a binary of the attacker's choosing. Every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24) is affected; the assessed vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, meaning exploitation depends on a victim following a crafted adoptium.net link (typically via phishing) and then executing the downloaded file, so the integrity impact is real but user-interaction-gated. There is no public exploit identified at time of analysis and EPSS is very low (0.11%, 1st percentile), the vendor fix is available, and the advisory is public under GHSA-f228-m952-5r6w - a real but non-urgent issue whose exposure window has already closed on the hosted site.
Plugin installation in Claude Code and Claude Desktop before 2.1.179 can install attacker-controlled code: the installer pins a plugin to a 40-character commit SHA from a marketplace but then runs git checkout on that string without confirming that the resulting HEAD actually equals the pinned SHA, so an attacker who controls the plugin repository on a Git host that allows branch names shaped like a 40-hex SHA can create a branch named after the 'reviewed' commit and have its tip checked out instead. Exploitation is unauthenticated from the attacker's side (CVSS 4.0 vector PR:N) but requires considerable user interaction - the victim must choose to install the malicious plugin and deliberately pin it to the ostensibly safe hash - which is why our independent assessment rates it a HIGH-impact, LOW-likelihood issue that is a moderate, conditional priority rather than an emergency. No public exploit code has been identified at time of analysis, CISA SSVC records Exploitation: none and Automatable: no, and there is no KEV listing.
Man-in-the-middle attackers who already control or intercept the network path to github.com can substitute a malicious gitstatusd archive during the gitstatus installer download bundled with Powerlevel10k (versions through 1.20.0), gaining code execution that persists under the victim's account on every prompt. Two weaknesses in the installer enable the substitution: it fetches the archive with curl -k, which disables TLS certificate validation, and it skips its SHA-256 integrity verification entirely when no hashing utility (sha256sum, shasum or openssl) is present on the host. Exploitation is conditional rather than opportunistic - it requires a privileged network position plus a user-initiated install or update event, and no public exploit code has been identified at time of analysis; no KEV listing or EPSS signal was provided with this record.
Remote code execution on the AstronRPA desktop client through version 1.1.6 is achievable by an on-path attacker who intercepts the client's plaintext HTTP auto-update check and serves a malicious update manifest with an unsigned NSIS installer, which electron-updater installs without verifying a publisher signature. The weakness is CWE-494 (download of code without integrity check), rated 7.7 under CVSS 4.0 with High attack complexity and attack requirements Present because the attacker must already hold a man-in-the-middle position and the client must run an update check; there is no public exploit identified at time of analysis and no vendor-released patch identified at time of analysis, so this is a conditional, non-scalable threat rather than a mass-exploitation emergency.
Attackers who control the Nginx UI upgrade mirror - or hold a man-in-the-middle position on the path to it - can get arbitrary code installed and executed by Nginx UI 2.0.0 through 2.4.x, because the self-upgrade routine verifies the downloaded binary only against a same-origin digest fetched from that same mirror, leaving no independent trust anchor. Exploitation requires two simultaneous conditions: the attacker's mirror/network position must let them alter BOTH the binary and its digest response, and an operator must manually trigger the self-upgrade, at which point the swapped payload is installed and runs in the Nginx UI process context. The issue is rated CVSS 7.5 (AV:N/AC:H/PR:N/UI:R) and is fixed in 2.5.0, which introduces minisign signature verification; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the high network-position prerequisite plus the required operator action substantially narrow realistic exploitation.
Firmware and bootloader updates on Red Lion Controls' N-Tron 700 Series industrial Ethernet switches can be pushed or pulled without authentication or image integrity checks, so an attacker running the standard N-Tron management software can scan an OT network over SNMP and TFTP and load arbitrary firmware, taking control of the device image (CWE-494). The published CVSS 4.0 score is 8.4, while the assessed CVSS 3.1 vector (network, scope-changed, High integrity and availability impact) is more severe; the two vectors also disagree on prerequisites, with the published vector encoding PR:L (some privilege) versus PR:N in our assessment, a conflict to confirm with the vendor. Firmware updates are unauthenticated on the update path per the reported description, but there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis; exploitation still requires routable access to the switch management plane, typically from inside a segmented, non-internet-facing OT/ICS network.
Insecure automatic update handling in GitAhead 2.5.0 through 2.7.1 allows a network-positioned attacker to deliver and execute an attacker-supplied update binary with the privileges of the victim user. The updater installs downloaded updates without integrity or signature verification (Updater.cpp:176-279), and the application permanently suppresses TLS certificate validation after the user accepts a single SSL error dialog (Application.cpp:284-309), so an attacker who presents an invalid certificate once can intercept later automatic update checks, offer a fake version, and achieve code execution when installation is approved. The CVSS 4.0 vector rates this 7.7 (AV:N/AC:H/AT:P/PR:N/UI:P) and the parallel CVSS 3.1 assessment is AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H; unauthenticated remote attackers are in scope, but exploitation is conditional on a man-in-the-middle position and mandatory user interaction at both the certificate dialog and the install prompt, and no public exploit code has been identified at time of analysis.
virtualenv versions prior to 21.7.12 cache and seed pip/setuptools wheels without verifying their bytes, so an attacker who controls the wheel delivery path can substitute a different wheel under the requested distribution, version, and filename and have it injected into every environment virtualenv subsequently creates. The flaw is exploitable unauthenticated but requires an active man-in-the-middle position, a compromised index, or a stale/poisoned mirror, and requires a user to actually create or seed a virtual environment. No public exploit code was identified at time of analysis, and the digest check is intentionally skipped whenever PIP_INDEX_URL, PIP_EXTRA_INDEX_URL, or PIP_INDEX points at a custom index - meaning custom-index users remain unverified even after upgrading.
Remote code execution in Dell Secure Connect Gateway (SCG) Policy Manager allows an unauthenticated, remote attacker to execute code or tamper with/disclose information on affected appliances by exploiting a missing integrity check on code the product downloads, affecting versions prior to 5.34.00.16 and prior to 5.36. Realistic exploitation requires the attacker to control or tamper with the content the Policy Manager retrieves - typically a man-in-the-middle position or a spoofed/compromised download source - which is why our assessment adjusts the vendor's 9.8 score to AC:H while retaining PR:N and UI:N. A vendor patch is available (5.36.00.16; 5.34.00.16 for the 5.34 branch), and there is no evidence of active exploitation or public exploit code; EPSS is 0.11% (1st percentile) and CISA SSVC rates exploitation as 'none' and automatable as 'no'.
Firmware updates for EnergizeLab AI Station, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 are delivered over plain HTTP without integrity or authenticity verification, allowing a network-adjacent attacker who can intercept traffic to substitute malicious updates and gain full control of the affected device or Windows host. The flaw is CWE-494 (download of code without integrity check), with a CVSS 3.1 base score of 7.5 (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning the attack is unauthenticated but requires an adjacent-network man-in-the-middle position and high complexity. No public exploit code or CISA KEV entry is identified in the provided data; exploitation depends on the attacker holding a MITM position, such as ARP spoofing, a rogue Wi-Fi access point, or a compromised router, and on an update check occurring.
URL validation bypass on the Eclipse Adoptium website (adoptium.net) lets an unauthenticated attacker craft a post-download link that passes the site's trusted-prefix check but resolves - after the browser's RFC 3986 dot-segment normalisation - to an arbitrary attacker-controlled repository, so a victim sees the genuine "Thank you for downloading Eclipse Temurin" page while their browser fetches a binary of the attacker's choosing. Every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24) is affected; the assessed vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, meaning exploitation depends on a victim following a crafted adoptium.net link (typically via phishing) and then executing the downloaded file, so the integrity impact is real but user-interaction-gated. There is no public exploit identified at time of analysis and EPSS is very low (0.11%, 1st percentile), the vendor fix is available, and the advisory is public under GHSA-f228-m952-5r6w - a real but non-urgent issue whose exposure window has already closed on the hosted site.
Plugin installation in Claude Code and Claude Desktop before 2.1.179 can install attacker-controlled code: the installer pins a plugin to a 40-character commit SHA from a marketplace but then runs git checkout on that string without confirming that the resulting HEAD actually equals the pinned SHA, so an attacker who controls the plugin repository on a Git host that allows branch names shaped like a 40-hex SHA can create a branch named after the 'reviewed' commit and have its tip checked out instead. Exploitation is unauthenticated from the attacker's side (CVSS 4.0 vector PR:N) but requires considerable user interaction - the victim must choose to install the malicious plugin and deliberately pin it to the ostensibly safe hash - which is why our independent assessment rates it a HIGH-impact, LOW-likelihood issue that is a moderate, conditional priority rather than an emergency. No public exploit code has been identified at time of analysis, CISA SSVC records Exploitation: none and Automatable: no, and there is no KEV listing.
Man-in-the-middle attackers who already control or intercept the network path to github.com can substitute a malicious gitstatusd archive during the gitstatus installer download bundled with Powerlevel10k (versions through 1.20.0), gaining code execution that persists under the victim's account on every prompt. Two weaknesses in the installer enable the substitution: it fetches the archive with curl -k, which disables TLS certificate validation, and it skips its SHA-256 integrity verification entirely when no hashing utility (sha256sum, shasum or openssl) is present on the host. Exploitation is conditional rather than opportunistic - it requires a privileged network position plus a user-initiated install or update event, and no public exploit code has been identified at time of analysis; no KEV listing or EPSS signal was provided with this record.
Remote code execution on the AstronRPA desktop client through version 1.1.6 is achievable by an on-path attacker who intercepts the client's plaintext HTTP auto-update check and serves a malicious update manifest with an unsigned NSIS installer, which electron-updater installs without verifying a publisher signature. The weakness is CWE-494 (download of code without integrity check), rated 7.7 under CVSS 4.0 with High attack complexity and attack requirements Present because the attacker must already hold a man-in-the-middle position and the client must run an update check; there is no public exploit identified at time of analysis and no vendor-released patch identified at time of analysis, so this is a conditional, non-scalable threat rather than a mass-exploitation emergency.
Attackers who control the Nginx UI upgrade mirror - or hold a man-in-the-middle position on the path to it - can get arbitrary code installed and executed by Nginx UI 2.0.0 through 2.4.x, because the self-upgrade routine verifies the downloaded binary only against a same-origin digest fetched from that same mirror, leaving no independent trust anchor. Exploitation requires two simultaneous conditions: the attacker's mirror/network position must let them alter BOTH the binary and its digest response, and an operator must manually trigger the self-upgrade, at which point the swapped payload is installed and runs in the Nginx UI process context. The issue is rated CVSS 7.5 (AV:N/AC:H/PR:N/UI:R) and is fixed in 2.5.0, which introduces minisign signature verification; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the high network-position prerequisite plus the required operator action substantially narrow realistic exploitation.
Firmware and bootloader updates on Red Lion Controls' N-Tron 700 Series industrial Ethernet switches can be pushed or pulled without authentication or image integrity checks, so an attacker running the standard N-Tron management software can scan an OT network over SNMP and TFTP and load arbitrary firmware, taking control of the device image (CWE-494). The published CVSS 4.0 score is 8.4, while the assessed CVSS 3.1 vector (network, scope-changed, High integrity and availability impact) is more severe; the two vectors also disagree on prerequisites, with the published vector encoding PR:L (some privilege) versus PR:N in our assessment, a conflict to confirm with the vendor. Firmware updates are unauthenticated on the update path per the reported description, but there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis; exploitation still requires routable access to the switch management plane, typically from inside a segmented, non-internet-facing OT/ICS network.
Insecure automatic update handling in GitAhead 2.5.0 through 2.7.1 allows a network-positioned attacker to deliver and execute an attacker-supplied update binary with the privileges of the victim user. The updater installs downloaded updates without integrity or signature verification (Updater.cpp:176-279), and the application permanently suppresses TLS certificate validation after the user accepts a single SSL error dialog (Application.cpp:284-309), so an attacker who presents an invalid certificate once can intercept later automatic update checks, offer a fake version, and achieve code execution when installation is approved. The CVSS 4.0 vector rates this 7.7 (AV:N/AC:H/AT:P/PR:N/UI:P) and the parallel CVSS 3.1 assessment is AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H; unauthenticated remote attackers are in scope, but exploitation is conditional on a man-in-the-middle position and mandatory user interaction at both the certificate dialog and the install prompt, and no public exploit code has been identified at time of analysis.
virtualenv versions prior to 21.7.12 cache and seed pip/setuptools wheels without verifying their bytes, so an attacker who controls the wheel delivery path can substitute a different wheel under the requested distribution, version, and filename and have it injected into every environment virtualenv subsequently creates. The flaw is exploitable unauthenticated but requires an active man-in-the-middle position, a compromised index, or a stale/poisoned mirror, and requires a user to actually create or seed a virtual environment. No public exploit code was identified at time of analysis, and the digest check is intentionally skipped whenever PIP_INDEX_URL, PIP_EXTRA_INDEX_URL, or PIP_INDEX points at a custom index - meaning custom-index users remain unverified even after upgrading.
Remote code execution in Dell Secure Connect Gateway (SCG) Policy Manager allows an unauthenticated, remote attacker to execute code or tamper with/disclose information on affected appliances by exploiting a missing integrity check on code the product downloads, affecting versions prior to 5.34.00.16 and prior to 5.36. Realistic exploitation requires the attacker to control or tamper with the content the Policy Manager retrieves - typically a man-in-the-middle position or a spoofed/compromised download source - which is why our assessment adjusts the vendor's 9.8 score to AC:H while retaining PR:N and UI:N. A vendor patch is available (5.36.00.16; 5.34.00.16 for the 5.34 branch), and there is no evidence of active exploitation or public exploit code; EPSS is 0.11% (1st percentile) and CISA SSVC rates exploitation as 'none' and automatable as 'no'.