Vulnerabilidades de Cato Networks
CVEs publicadas que afetam produtos de Cato Networks: 5 registro(s), com severidade, exploração e correções.
SDP Client 3Socket 1Cato Client for Windows 1Cato Client for macOS 1Cato Client for Linux 1Cato Client for iOS 1Cato Client for Android 1
CVE-2026-19377
Média · 6.0
CWE-295 15/10/2026
Improper certificate validation in Cato Client tunnel handshake
Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.
CVE-2026-10739
Alta · 8.5
CWE-23 30/09/2026
Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation
Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe.
CVE-2026-10726
Média · 6.8
CWE-73 30/09/2026
Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement.
CVE-2026-12374
Média · 6.4
CWE-295 01/07/2026
Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool
Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a symlink swap during package installation.
CVE-2025-14213
Alta · 8.3
CWE-20 31/03/2026
Cato's Socket WebUI is vulnerable to OS Command Injection
Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute arbitrary operating system commands as the root user on the Socket’s internal system.