CVE-2016-10659

CVE-2016-10659 describes a critical vulnerability in the POCO libraries, specifically affecting the 'macchina poco' product, where source files are downloaded via unencrypted HTTP during compilation. This exposes the process to Man-in-the-Middle (MITM) attacks, allowing an attacker to substitute legitimate resources with malicious code. With a CVSS score of 8.1 (HIGH), this vulnerability carries a high risk of remote code execution (RCE) with high impact on confidentiality, integrity, and availability, requiring low attack complexity and no user interaction. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.