Cato-networks
5 CVEs tracked since 2024. Since Jul 2024, none of them reached CISA KEV.
Cato-networks CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2024-07 | 5 | 0 |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Cato-networks's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 12 most recently published vulnerabilities affecting Cato-networks.
- CVE-2026-19377Improper certificate validation in Cato Client tunnel handshake—
- CVE-2026-10726Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation—
- CVE-2026-10739Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation—
- CVE-2026-12374Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool—
- CVE-2025-14213Cato's Socket WebUI is vulnerable to OS Command Injection—
- CVE-2025-7012Cato Networks Linux Client Local Privilege Escalation via Symlink—
- CVE-2025-3886CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition8.1
- CVE-2024-6978Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users5.6
- CVE-2024-6977Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover6.5
- CVE-2024-6975Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file8.8
- CVE-2024-6974Cato Networks Windows SDP Client Local Privilege Escalation via self-upgrade8.8
- CVE-2024-6973Remote Code Execution in Cato Windows SDP client via crafted URLs7.5
The record
- Peak rank
- #130 in Jul 2024
- Busiest month shown
- Jul 2024, 5 CVEs
- Months with a KEV entry
- 0 since Jul 2024
- Monthly snapshots
- 1 since 2024