How many Cato Networks SDP Client CVEs are in CISA KEV?

None of Cato Networks SDP Client's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Cato Networks SDP Client are affected?

10 distinct Cato Networks SDP Client versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Cato Networks SDP Client CVEs?

Cato Networks SDP Client's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-295 (Improper Certificate Validation), CWE-426 (Untrusted Search Path), CWE-23 (Relative Path Traversal).

What is the average severity of Cato Networks SDP Client CVEs?

The average CVSS base score across Cato Networks SDP Client's scored CVEs is 7.7.

RadicalNotion.AI

Log in Create an account

Cato Networks

9 CVEs

Cato Networks SDP Client Vulnerabilities

Name: Cato Networks SDP Client vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for SDP Client by Cato Networks.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

5

Public exploits

PoC or exploit code

7.7

Avg CVSS

2024–2026

Last updated September 30, 2026

Overview

Cato Networks SDP Client has 9 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 7.7. Affected platforms include macos, windows.

Severity and exploitation

How the CVSS severity of Cato Networks SDP Client's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High5

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Cato Networks SDP Client's CVEs are currently listed in CISA's KEV catalog.

Public exploits

5

5 of Cato Networks SDP Client's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Cato Networks SDP Client version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 5.10.344 CVEs
< 6.12.62 CVEs
< 5.10.281 CVE
< 5.8.01 CVE
5.12.0 <= v < 5.13.11 CVE

Fixed in

5.10.344 CVEs
6.12.62 CVEs
5.10.281 CVE
5.13.11 CVE
5.8.01 CVE

Find a version

9 CVEs

Sort

Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation
CVE-2026-10726
Patch
CWE-295
Medium · CVSS 6.8
EPSS 0.1% (0th pct)2026-09-30
Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation
CVE-2026-10739
Patch
CWE-23
High · CVSS 8.5
EPSS 0.1% (2th pct)2026-09-30
Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool
CVE-2026-12374
Patch
CWE-295
Medium · CVSS 6.4
EPSS 0.1% (0th pct)2026-07-01
CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition
CVE-2025-3886
Patch
CWE-362
Medium · CVSS 5.7
EPSS 0.2% (15th pct)2025-04-27
High vulnerability · 2024-07-31
CVE-2024-6978
Public exploit
Patch
CWE-20
High · CVSS 8.8
EPSS 0.1% (3th pct)2024-07-31
Medium vulnerability · 2024-07-31
CVE-2024-6977
Public exploit
Patch
CWE-532
Medium · CVSS 6.5
EPSS 0.2% (12th pct)2024-07-31
High vulnerability · 2024-07-31
CVE-2024-6975
Public exploit
Patch
CWE-426
High · CVSS 8.8
EPSS 0.3% (18th pct)2024-07-31
High vulnerability · 2024-07-31
CVE-2024-6974
Public exploit
Patch
CWE-426
High · CVSS 8.8
EPSS 0.2% (14th pct)2024-07-31
High vulnerability · 2024-07-31
CVE-2024-6973
Public exploit
Patch
CWE-20
High · CVSS 8.8
EPSS 0.8% (56th pct)2024-07-31

Common weakness types

The CWE weakness categories most often found in Cato Networks SDP Client CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Cato Networks SDP Client CVEs were published each year.

2024

5

2025

1

2026

3

Other Cato Networks products

Browse vulnerabilities for other products by Cato Networks.

cato client8 CVEs Cato Client for Android1 CVEs Cato Client for iOS1 CVEs Cato Client for Linux1 CVEs Cato Client for macOS1 CVEs Cato Client for Windows1 CVEs Socket1 CVEs

All Cato Networks vulnerabilities

Frequently asked questions

Common questions about Cato Networks SDP Client vulnerabilities.

How many CVEs does Cato Networks SDP Client have?: Cato Networks SDP Client has 9 published CVE records since 2024.
How many Cato Networks SDP Client CVEs are in CISA KEV?: None of Cato Networks SDP Client's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Cato Networks SDP Client vulnerabilities?: Yes — 5 of Cato Networks SDP Client's CVEs have a known public exploit.
Which versions of Cato Networks SDP Client are affected?: 10 distinct Cato Networks SDP Client versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Cato Networks SDP Client CVEs?: Cato Networks SDP Client's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-295 (Improper Certificate Validation), CWE-426 (Untrusted Search Path), CWE-23 (Relative Path Traversal).
What is the average severity of Cato Networks SDP Client CVEs?: The average CVSS base score across Cato Networks SDP Client's scored CVEs is 7.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Cato Networks SDP Client vulnerabilities

Get an alert for each new Cato Networks SDP Client CVE, with AI-written analysis and remediation steps.

Create an account See pricing