Medium severityNVD Advisory· Published Oct 15, 2026

CVE-2026-19377

Description

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cato Networks/CatoClientllm-fuzzy

Patches

Vulnerability mechanics

References

knowledge.catonetworks.com/docs/security-vulnerability-cve-2026-19377-that-impacts-cato-client-versionsnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000