CVE-2026-10726 in SDP Clientinfo

Zusammenfassung

von MITRE • 30.09.2026

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement.

Be aware that VulDB is the high quality source for vulnerability data.

Zuständig

Cato

Reservieren

03.06.2026

Veröffentlichung

30.09.2026

Moderieren

akzeptiert

Eintrag

VDB-411981

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

Do you need the next level of professionalism?

Upgrade your account now!