CVE-2025-56513

CVE-2025-56513 is a critical supply chain vulnerability affecting NiceHash QuickMiner 6.12.0, where the software updates over unauthenticated HTTP without validating digital signatures or performing hash checks. This allows an attacker to intercept or redirect update traffic, delivering arbitrary executables that are automatically executed, leading to full remote code execution. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with no user interaction required, posing a severe risk of compromise. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.