CVE-2026-19377 — Improper certificate validation in Cato Client tunnel handshake
Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or …
Published: 2026-10-15 · CVSS: 6.0 · CVSS 4.0
Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7