Cato Networks vulnerabilities
Published CVEs affecting Cato Networks products: 3 record(s), with severity, exploitation and fixes.
Socket 1Cato Client for Windows 1Cato Client for macOS 1Cato Client for Linux 1Cato Client for iOS 1Cato Client for Android 1SDP Client 1
CVE-2026-19377
Medium · 6.0
CWE-295 Oct 15, 2026
Improper certificate validation in Cato Client tunnel handshake
Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.
CVE-2026-12374
Medium · 6.4
CWE-295 Jul 1, 2026
Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool
Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a symlink swap during package installation.
CVE-2025-14213
High · 8.3
CWE-20 Mar 31, 2026
Cato's Socket WebUI is vulnerable to OS Command Injection
Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute arbitrary operating system commands as the root user on the Socket’s internal system.