MEDIUM 6.8 NVD

CVE-2026-10726

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, ru

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement.

References

https://knowledge.catonetworks.com/docs/cve-2026-10726-cve-2026-10739-impacts-windows-clie

Published: 2026-09-30 · Source: NVD · Feed updated: 2026-09-30

This medium severity vulnerability with a CVSS score of 6.8 was published on 2026-09-30 via NVD.

vulnfeed aggregates 9449 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.