CVE-2026-10726— Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation
Quick assessment
Affected
Cato Networks SDP Client
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cato Windows SDP 客户端在版本 6.12.6 之前存在任意文件披露漏洞。由于不当的文件路径验证以及缺失的 TLS 证书强制机制，低权限本地用户可以诱使以 Local System 身份运行的 Windows 服务读取并披露任意本地文件。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-10726
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation
Source: CVE Program / CVE List V5
Vulnerability Description
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
证书验证不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cato Networks | SDP Client | 0 ~ 6.12.6 | - |
|
II. Public POCs for CVE-2026-10726
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-10726
请登录查看更多情报信息。
Other References for CVE-2026-10726 (1)
IV. Related Vulnerabilities
Same product: SDP Client
-
CVE-2026-10739
Cato Networks SDP Client for Windows is vulnerable to Local -
CVE-2026-12374
Improper XPC caller certificate validation and TOCTOU race c -
CVE-2025-3886
CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race -
CVE-2024-6978
Cato Networks Windows SDP Client Local root certificates can -
CVE-2024-6977
Cato Networks Windows SDP Client Sensitive data in trace log
Same vendor: Cato Networks
-
CVE-2026-10739
Cato Networks SDP Client for Windows is vulnerable to Local -
CVE-2026-12374
Improper XPC caller certificate validation and TOCTOU race c -
CVE-2025-14213
Cato's Socket WebUI is vulnerable to OS Command Injection -
CVE-2025-7012
Cato Networks Linux Client Local Privilege Escalation via Sy -
CVE-2025-3886
CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race
Same weakness: CWE-295
-
CVE-2026-92868
Pgpool-II证书验证不当致认证绕过漏洞 -
CVE-2026-86131
Fireware OS Code Injection in BOVPN Over TLS Client Allows R -
CVE-2026-97687
urllib3: HTTPS proxy TLS configuration may be ignored or ove -
CVE-2026-73594
Dell SCG<5.36证书验证缺陷致信息泄露 -
CVE-2026-101916
@grpc/grpc-js: In certain configurations, getAuthContext can
V. Comments for CVE-2026-10726
No comments yet