CVE Program partner

Cato

Cato Networks

API
CVEs, 365 days512 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationCato Networks
RoleCNA
TypeVendor, Researcher
Reports tomitre
ScopeAll Cato Networks products and vulnerabilities in third-party products affecting Cato products unless covered by the scope of another CNA.
Advisorieshttps://securityadvisories.catonetworks.com/

Latest CVEs · RSS

  • CVE-2026-19377 2026-10-15 · CVSS 6.0
    Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server
  • CVE-2026-10726 2026-09-30 · CVSS 6.8
    Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, ru
  • CVE-2026-10739 2026-09-30 · CVSS 8.5
    Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supp
  • CVE-2026-12374 2026-07-01 · CVSS 6.4
    Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 o
  • CVE-2025-14213 2026-03-31 · CVSS 8.3
    Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interfa
  • CVE-2025-7012 2025-07-13 · CVSS 8.6
    An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link
  • CVE-2025-3886 2025-04-27 · CVSS 5.7
    An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool co
  • CVE-2024-6978 2024-07-31 · CVSS 5.6
    Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28.
  • CVE-2024-6977 2024-07-31 · CVSS 6.5
    A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. H
  • CVE-2024-6975 2024-07-31 · CVSS 8.8
    Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34.
  • CVE-2024-6974 2024-07-31 · CVSS 8.8
    Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34.
  • CVE-2024-6973 2024-07-31 · CVSS 7.5
    Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34.

All CVE Program partners