Skip to content
OpenAdvisories

Vendor

CleverControl

1 known vulnerabilities.

Products

CleverControl employee monitoring software 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-10548

    Missing Certificate Validation in CleverControl Installer Allows Remote Code Execution

    The CleverControl employee monitoring software (v11.5.1041.6) fails to validate TLS server certificates during the installation process. The installer downloads and executes external components using curl.exe --insecure, enabling a man-in-the-middle attacker …

    CleverControl CleverControl employee monitoring software