CVE-2016-10662

CVE-2016-10662 describes a critical vulnerability in the 'tomita' node wrapper for Yandex Tomita Parser, where the software downloads binary resources over unencrypted HTTP. This makes it susceptible to Man-in-the-Middle (MITM) attacks, potentially leading to remote code execution (RCE) if an attacker intercepts and replaces the requested resources. With a CVSS score of 8.1 (HIGH), the vulnerability has a network attack vector and high impact on confidentiality, integrity, and availability, though it requires high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.