CVE-2023-38356: Minitool Power Data Recovery

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

MiniTool Power Data Recovery 11.6 contains an insecure installation process that allows attackers to achieve remote code execution through a man in the middle attack.

Affected products

• Minitool Power Data Recovery: version 11.6 only

Published 2023-09-19. Last modified 2026-06-17.