CVE-2026-19377— Improper certificate validation in Cato Client tunnel handshake
Quick assessment
Affected
Cato Networks Cato Client for Windows
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cato 客户端在隧道握手过程中存在证书验证不当的漏洞，使得中间人攻击者能够冒充 Cato 存在点（PoP）服务器，从而拦截或篡改隧道流量。
Possible ATT&CK Techniques 2 AI
T1557 · Adversary-in-the-Middle T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 5
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cato Networks | Cato Client for Android | < 5.6.2 |
affected |
| Cato Networks | Cato Client for iOS | < 5.9 |
affected |
| Cato Networks | Cato Client for Linux | < 5.8.1 |
affected |
| Cato Networks | Cato Client for macOS | < 6.1.1 |
affected |
| Cato Networks | Cato Client for Windows | < 6.12.6 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-19377
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper certificate validation in Cato Client tunnel handshake
Source: CVE Program / CVE List V5
Vulnerability Description
Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
证书验证不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cato Networks | Cato Client for Windows | 0 ~ 6.12.6 | - |
|
| Cato Networks | Cato Client for macOS | 0 ~ 6.1.1 | - |
|
| Cato Networks | Cato Client for Linux | 0 ~ 5.8.1 | - |
|
| Cato Networks | Cato Client for iOS | 0 ~ 5.9 | - |
|
| Cato Networks | Cato Client for Android | 0 ~ 5.6.2 | - |
|
II. Public POCs for CVE-2026-19377
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19377
请登录查看更多情报信息。
Other References for CVE-2026-19377 (1)
IV. Related Vulnerabilities
Same vendor: Cato Networks
-
CVE-2026-10726
Cato Windows SDP Client arbitrary file disclosure due to imp -
CVE-2026-10739
Cato Networks SDP Client for Windows is vulnerable to Local -
CVE-2026-12374
Improper XPC caller certificate validation and TOCTOU race c -
CVE-2025-14213
Cato's Socket WebUI is vulnerable to OS Command Injection -
CVE-2025-7012
Cato Networks Linux Client Local Privilege Escalation via Sy
Same weakness: CWE-295
-
CVE-2026-16754
联想C33摄像头证书验证漏洞 -
CVE-2026-109383
undici vulnerable to TLS certificate validation bypass via d -
CVE-2023-32198
Steve doesn’t verify a server’s certificate and is susceptib -
CVE-2025-23390
Fleet doesn’t validate a server’s certificate when connectin -
CVE-2026-105236
TLS 1.2 session resumption in ssl crosses SNI virtual-host c
V. Comments for CVE-2026-19377
No comments yet