CVE-2026-19377
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 15, 2026
Vendor
unknown
Description
Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.