Cato Networks vulnerabilities
12 published CVEs name Cato Networks among the affected products.
- 12Published CVEs12 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-19377
Improper certificate validation in Cato Client tunnel handshake
Cato Networks · Cato Client for Windows
Medium6.0 - CVE-2026-10726
Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation
Cato Networks · SDP Client
Medium6.8 - CVE-2026-10739
Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation
Cato Networks · SDP Client
High8.5 - CVE-2026-12374
Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool
Cato Networks · SDP Client
Medium6.4 - CVE-2025-14213
Cato's Socket WebUI is vulnerable to OS Command Injection
Cato Networks · Socket
High8.3 - CVE-2025-7012
Cato Networks Linux Client Local Privilege Escalation via Symlink
Cato Networks · Cato Client
High8.6 - CVE-2025-3886
CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition
Cato Networks · SDP Client
Medium5.7 - CVE-2024-6978
Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users
Cato Networks · SDP Client
Medium5.6 - CVE-2024-6977
Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover
Cato Networks · SDP Client
Medium6.5 - CVE-2024-6975
Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file
Cato Networks · SDP Client
High8.8