CVE-2016-10678

CVE-2016-10678 describes a Man-in-the-Middle (MITM) vulnerability in serc.js, a Selenium RC process wrapper, due to its insecure download of binary resources over HTTP. This flaw allows an attacker to intercept and swap requested resources, potentially leading to remote code execution (RCE) if they are positioned between the user and the remote server. With a CVSS v3 score of 8.1 (HIGH), the vulnerability has a network attack vector and high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.