CVE-2016-10669

CVE-2016-10669 affects the soci_project soci library, stemming from its practice of downloading binary resources over unencrypted HTTP. This vulnerability allows for Man-in-the-Middle (MITM) attacks, where an attacker can intercept and replace requested resources with malicious code, potentially leading to remote code execution (RCE). Rated with a CVSS score of 8.1 (HIGH), it presents a significant risk due to its network-based attack vector and high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.