PT-2026-114811 · Cato Networks · Cato Client For Android+4
CVE-2026-19377
·
Published
2026-10-15
·
Updated
2026-10-15
CVSS v4.0
6.0
Medium
| Vector | AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N |
Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.
Fix
Improper Certificate Validation
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cato Client For Android
Cato Client For Linux
Cato Client For Windows
Cato Client For Ios
Cato Client For Macos