Veille CVE

Recherche « Cato Networks Cato Client for macOS »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Cato Networks Cato Client for macOS » ✕
  1. CVE-2026-19377 6.0 Moyenne

    Cato Networks Cato Client for Windows · Cato Networks Cato Client for macOS · Cato Networks Cato Client for Linux · Cato Networks Cato Client for iOS

    Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.

  2. CVE-2026-12374 6.4 Moyenne

    Cato Networks SDP Client

    Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a symlink swap during package installation.