CyberSec.Space Logo
返回 CVE 浏览器

CVE-2025-56232

MEDIUM
6.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-11-05
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle (MitM) attack to intercept update requests and replace installer or update packages with malicious files.

Affected Platforms (CPE)

📦
Cdprojekt

Gog Galaxy

= 2.0.0.2

References & Advisories

🔗 https://www.notion.so/CVE-2025-56232-2a04e9f2a40d80dab203e39b5c9462f6
🔗 https://youtu.be/WchHCmqGaFQ

相关漏洞威胁

CVE-2026-164937.8

A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py const...

CVE-2026-123987.5

A command injection vulnerability was found in galaxy_ng. The do_git_checkout() function in the legacy role import API (v1) interp...

CVE-2026-54362

An incorrect visibility condition in the MISP event template builder allowed authenticated non-site-admin users to view galaxies t...

CVE-2026-113327.8

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/r...