CWE-494

Medium likelihood

Download of Code Without Integrity Check

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

211 vulnerabilities with CWE-494
CVE-2026-22865 HIGH
Gradle < 8.14.4 - Dependency Resolution Bypass via Non-Fatal Repository Exception Handling
CVSS 7.4
CVE-2026-22816 HIGH
Gradle < 8.14.4 - Dependency Resolution Bypass via Unresolvable Host Name
CVSS 7.4
CVE-2025-10539 MEDIUM
Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App
CVSS 4.8
CVE-2025-47904 MEDIUM
Microchip Time Provider 4100 <2.5 - Code Injection
CVSS 4.1
CVE-2025-15575 MEDIUM
SolaX Power Pocket WiFi - Unauthenticated Firmware Tampering via Unsigned Update Files
CVSS 5.3
CVE-2025-15556 HIGH KEV
Notepad++ < 8.8.9 - Download of Code Without Integrity Check in WinGUp Updater
CVSS 7.5
CVE-2025-69263 HIGH
pnpm < 10.26.0 - Download of Code Without Integrity Check via HTTP Tarball Dependencies
CVSS 7.5
CVE-2025-68109 CRITICAL
ChurchCRM < 6.5.3 - Remote Code Execution via Database Restore File Upload
CVSS 9.1
CVE-2025-65855 MEDIUM
Netun Solutions HelpFlash IoT v18_178_221102_ASCII_PRO_1R5_50 - RCE
CVSS 6.6
CVE-2025-55310 HIGH
Foxit PDF & Editor <13.2-2025.2 - Info Disclosure
CVSS 7.3
CVE-2025-14265 CRITICAL
ScreenConnect <25.8 - Code Injection
CVSS 9.1
CVE-2025-66334 LOW
HarmonyOS - Denial of Service in Office Service
CVSS 3.3
CVE-2025-66333 LOW
HarmonyOS - Denial of Service in Office Service
CVSS 3.3
CVE-2025-66332 LOW
HarmonyOS - Denial of Service in Office Service
CVSS 3.3
CVE-2025-66331 LOW
HarmonyOS - Denial of Service in Office Service
CVSS 3.3
CVE-2025-61228 HIGH
Shirt Pocket SuperDuper! <3.10 - RCE
CVSS 7.8
CVE-2025-63434 HIGH
Xtooltech Xtool AnyScan Android App <4.40.40 - RCE
CVSS 8.8
CVE-2025-40604 CRITICAL
SonicWall Email Security Appliance Firmware < 10.0.33.8195 - Download of Code Without Integrity Check
CVSS 9.8
CVE-2025-63220 HIGH
Sound4 FIRST - Remote Code Execution via Malicious Firmware Update Package
CVSS 7.2
CVE-2025-63215 HIGH
Sound4 IMPACT Firmware - Remote Code Execution via Malicious Firmware Update Package
CVSS 7.2
CVE-2025-52263 HIGH
Startcharge Artemis AC Charger 7-22 kW v1.0.4 - Authenticated RCE
CVSS 8.0
CVE-2025-11493 HIGH
ConnectWise Automate < 2025.9 - Download of Code Without Integrity Check
CVSS 8.8
CVE-2025-11182 MEDIUM
GTONE ChangeFlow <9.0.1.1 - Path Traversal
CVSS 6.5
CVE-2025-56513 CRITICAL
NiceHash QuickMiner 6.12.0 - Remote Code Execution via Unauthenticated Update Hijacking
CVSS 9.8
CVE-2025-34212 CRITICAL
Vasion Print Virtual Appliance Host <22.0.843 & Application <20.0.1923 Supply Chain Attack
CVSS 9.8
Details
Vulnerabilities 211
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits