{"id":"CVE-2026-10726","published":"2026-09-30T12:17:12.810","lastModified":"2026-09-30T19:38:27.293","description":"Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-73","CWE-295"],"vendors":[],"products":[],"references":[{"url":"https://knowledge.catonetworks.com/docs/cve-2026-10726-cve-2026-10739-impacts-windows-client-versions-lower-than-6126","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}