CVE-2026-10739

Published 30 September 2026 · tracked since 1 October 2026

Description

Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-129444 CRITICAL 10
• CVE-2026-129443 MEDIUM 6.3
• CVE-2026-127048
• CVE-2026-124673
• CVE-2026-124671
• CVE-2026-123707
• CVE-2026-116559
• CVE-2026-114452
• CVE-2026-114451
• CVE-2026-110989

→ Open the live CVE board · all tools