Veille CVE

Recherche « Cato Networks Cato Client for Windows »

3 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Cato Networks Cato Client for Windows » ✕
  1. CVE-2026-19377 6.0 Moyenne

    Cato Networks Cato Client for Windows · Cato Networks Cato Client for macOS · Cato Networks Cato Client for Linux · Cato Networks Cato Client for iOS

    Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.

  2. CVE-2026-10739 8.5 Élevée

    Cato Networks SDP Client

    Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe.

  3. CVE-2026-10726 6.8 Moyenne

    Cato Networks SDP Client

    Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement.