Tonec vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Tonec products: 1 record(s), with severity, exploitation and fixes.

Internet Download Manager 1

Exploited only (KEV) →

CVE-2025-56231 Critical · 9.1 CWE-295 Nov 5, 2025

Improper Certificate Validation in Tonec Internet Download Manager

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.