Cato Networks

9 CVEs across 3 Cato Networks products. Browse Cato Networks vulnerabilities, severities, and proof-of-concept exploits.

Cato Networks products with known CVEs

ProductCVEs
Sdp Client7
Cato Client1
Socket1
Cato Networks CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-123742026-07-01Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1…
CVE-2025-142132026-03-31Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interf…
CVE-2025-70122025-07-13An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic lin…
CVE-2025-3886High8.12025-04-27An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition (TOCTOU) via the PrivilegedHelperTool c…
CVE-2024-6978Medium5.62024-07-31Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28.
CVE-2024-6977Medium6.52024-07-31A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover…
CVE-2024-6975High8.82024-07-31Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34.
CVE-2024-6974High8.82024-07-31Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34.
CVE-2024-6973High7.52024-07-31Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34.