CVE-2026-19377
Improper certificate validation in Cato Client tunnel handshake
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.
| CWE | CWE-295 |
| Vendor | cato networks |
| Product | cato client for windows |
| Published | Oct 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for cato networks cato client for windows
Be the first to know when new unknown vulnerabilities affecting cato networks cato client for windows are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Cato Networks / Cato Client for Windows
0 < 6.12.6
Cato Networks / Cato Client for macOS
0 < 6.1.1
Cato Networks / Cato Client for Linux
0 < 5.8.1
Cato Networks / Cato Client for iOS
0 < 5.9
Cato Networks / Cato Client for Android
0 < 5.6.2