Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-10739

Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation

Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Catonetworks
Products
Sdp Client
CVE-2026-10726

Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Catonetworks
Products
Sdp Client
CVE-2026-12374

Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool

Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a symlink swap during package installation.

CVSS 4.0 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Catonetworks
Products
Sdp Client
CVE-2024-6975

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Catonetworks
Products
Cato Client Sdp Client
CVE-2024-6974

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgrade

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Catonetworks
Products
Cato Client Sdp Client
CVE-2024-6973

Remote Code Execution in Cato Windows SDP client via crafted URLs

Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Catonetworks
Products
Cato Client Sdp Client