53 matches found
CVE-2026-10739
Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe...
CVE-2026-10726
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...
EUVD-2026-89780
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...
CVE-2026-10726 Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...
CVE-2026-10726
The Cato Windows SDP Client before version 6.12.6 is vulnerable to an arbitrary file disclosure vulnerability. A low-privileged local user can exploit this flaw to force the Windows service—which operates with Local System privileges—to read and disclose arbitrary local files. The root cause is a...
CVE-2026-10726 Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...
EUVD-2026-89779
Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe...
CVE-2026-10739 Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation
Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe...
CVE-2026-10739 Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation
Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe...
CVE-2026-10739
The Cato Networks SDP Client for Windows versions prior to 6.12.6 are vulnerable to Local Privilege Escalation . The root cause is the improper validation of a client-supplied SID over a local IPC named pipe . This flaw allows a local user to delete arbitrary files with SYSTEM privileges . No inf...
PT-2026-103124
Name of the Vulnerable Software and Affected Versions Cato Networks SDP Client for Windows versions prior to 6.12.6 Description A local privilege escalation issue exists due to improper validation of a client-supplied Security Identifier SID over a local Inter-Process Communication IPC named pipe...
CVE-2026-10726: Improper Certificate Validation
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...
CVE-2026-10739: Relative Path Traversal
Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe...
EUVD-2019-9392
Malware in sbrugna...
EUVD-2024-47956
Malicious code in bioql PyPI...
EUVD-2024-47957
Malicious code in bioql PyPI...
EUVD-2024-47959
Malicious code in bioql PyPI...
EUVD-2024-47960
Malicious code in bioql PyPI...