Cato Networks vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20252
3. 20265

Newest CVEs

• CVE-2026-19377

  Improper certificate validation in Cato Client tunnel handshake

  Cato Networks · Cato Client for Windows

  Medium6.0
• CVE-2026-10726

  Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation

  Cato Networks · SDP Client

  Medium6.8
• CVE-2026-10739

  Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation

  Cato Networks · SDP Client

  High8.5
• CVE-2026-12374

  Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool

  Cato Networks · SDP Client

  Medium6.4
• CVE-2025-14213

  Cato's Socket WebUI is vulnerable to OS Command Injection

  Cato Networks · Socket

  High8.3
• CVE-2025-7012

  Cato Networks Linux Client Local Privilege Escalation via Symlink

  Cato Networks · Cato Client

  High8.6
• CVE-2025-3886

  CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition

  Cato Networks · SDP Client

  Medium5.7
• CVE-2024-6978

  Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users

  Cato Networks · SDP Client

  Medium5.6
• CVE-2024-6977

  Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover

  Cato Networks · SDP Client

  Medium6.5
• CVE-2024-6975

  Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file

  Cato Networks · SDP Client

  High8.8