CVE-2026-19377

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence PoP server and intercept or modify tunnel traffic...