What’s Vulnerable › Products

Cato Networks SDP Client vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Cato Networks SDP Client version is affected

Latest Cato Networks SDP Client vulnerabilities

• CVE-2026-10739 — Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation (CVSS 8.5)
• CVE-2026-10726 — Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation (CVSS 6.8)
• CVE-2026-12374 — Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool (CVSS 6.4)
• CVE-2025-7012 — Cato Networks Linux Client Local Privilege Escalation via Symlink (CVSS 8.6)
• CVE-2025-3886 — CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition (CVSS 8.1)
• CVE-2024-6978 — Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users (CVSS 8.8)
• CVE-2024-6977 — Cato Networks Windows SDP Client Sensitive data in trace logs can lead to account takeover (CVSS 6.5)
• CVE-2024-6975 — Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file (CVSS 8.8)
• CVE-2024-6974 — Cato Networks Windows SDP Client Local Privilege Escalation via self-upgrade (CVSS 7.8)
• CVE-2024-6973 — Remote Code Execution in Cato Windows SDP client via crafted URLs (CVSS 8.8)
• CVE-2023-43976 — (CVSS 8.1)