CVE-2025-56231: Tonec Internet Download Manager

Critical severity, CVSS 9.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.

Affected products

• Tonec Internet Download Manager: up to and including 6.42.41.1

Published 2025-11-05. Last modified 2026-07-05.