Medium severityNVD Advisory· Published Sep 30, 2026

CVE-2026-10726

Description

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cato/Windows SDP Clientllm-create
Range: <6.12.6

Patches

Vulnerability mechanics

References

knowledge.catonetworks.com/docs/cve-2026-10726-cve-2026-10739-impacts-windows-client-versions-lower-than-6126nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000