Threats tagged 'ghsa-35v6-rgcf-cgp4'

1 threat

Threats tagged 'ghsa-35v6-rgcf-cgp4'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS <0.1%	CVE-2026-10726SDP Client · Improper certificate validation Medium6.8EPSS <0.1%2026-09-30CVE Database V5CVE-2026-10726 Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement. EPSS <0.1%Vulnerability Cato Networks #cwe-295 #cwe-73 #ghsa-35v6-rgcf-cgp4	CVE Database V5	2026-09-30

Showing 1–1 of 1 result