CVE-2016-10666

CVE-2016-10666 affects the tomita-parser Node.js wrapper for Yandex Tomita Parser. The vulnerability stems from the wrapper downloading binary resources over unencrypted HTTP, making it susceptible to Man-in-the-Middle (MITM) attacks. An attacker could exploit this by intercepting and replacing requested resources with malicious code, potentially leading to remote code execution (RCE) with high impact on confidentiality, integrity, and availability. While the CVSS score is 8.1 (HIGH), there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.