CVE-2025-10548

The CleverControl employee monitoring software (specifically version 11.5.1041.6 ) is vulnerable to a man-in-the-middle attack due to a failure to validate TLS server certificates during the installation process. The installer uses curl.exe --insecure to download and execute external components, ...