---
id: "CVE-2026-112170"
page: "https://infrastack.ai/live/CVE-2026-112170"
kind: "vulnerability"
aliases: ["CVE-2026-112170"]
title: "Unnamed software installs upgrade files without integrity checks"
severity: "medium"
cvss: 6.3
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["other"]
not_affected_if: []
published_at: "2026-11-09T13:17:04+00:00"
first_seen_at: "2026-11-09T13:26:50+00:00"
updated_at: "2026-11-09T13:27:38+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112170", "first_seen_at": "2026-11-09T13:26:50+00:00"}]
exploit_sources: []
---

# Unnamed software installs upgrade files without integrity checks

Link for people: https://infrastack.ai/live/CVE-2026-112170 (this .md is for agents)

The software downloads upgrade files and installs them without verifying their integrity. An attacker who can alter the download path could get tampered code installed as an update.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-09T13:26:50+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112170

## From the sources

The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_