CVE-2026-10726
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 30, 2026
Vendor
unknown
Description
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement.