CCato Networks

Products

Exploited and recent CVEs

• CVE-2026-19377 Medium 6.0 Improper certificate validation in Cato Client tunnel handshake <0.1%
• CVE-2026-19377 Medium 6.0 Improper certificate validation in Cato Client tunnel handshake <0.1%
• CVE-2026-19377 Medium 6.0 Improper certificate validation in Cato Client tunnel handshake <0.1%
• CVE-2026-19377 Medium 6.0 Improper certificate validation in Cato Client tunnel handshake <0.1%
• CVE-2026-19377 Medium 6.0 Improper certificate validation in Cato Client tunnel handshake <0.1%
• CVE-2026-10726 Medium 6.8 Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation <0.1%
• CVE-2026-10739 High 8.5 Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation 0.1%
• CVE-2026-12374 Medium 6.4 Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool <0.1%
• CVE-2025-14213 High 8.3 Cato's Socket WebUI is vulnerable to OS Command Injection 0.9%
• CVE-2025-7012 High 8.6 Cato Networks Linux Client Local Privilege Escalation via Symlink 0.2%
• CVE-2025-3886 Medium 5.7 CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition 0.2%
• CVE-2024-6978 Medium 5.6 Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users 0.1%
• CVE-2024-6977 Medium 6.5 Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover 0.2%
• CVE-2024-6975 High 8.8 Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file 0.3%
• CVE-2024-6974 High 8.8 Cato Networks Windows SDP Client Local Privilege Escalation via self-upgrade 0.2%
• CVE-2024-6973 High 7.5 Remote Code Execution in Cato Windows SDP client via crafted URLs 0.8%