CVE-2012-0063: Tucaneando Tucan

High severity, CVSS 8.1. EPSS: 2.3% chance of exploitation in the next 30 days.

Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan.

Affected products

• Tucaneando Tucan: up to and including 0.3.10

Published 2020-02-21. Last modified 2026-06-16.