{"id":"CVE-2026-19377","published":"2026-10-15T07:17:59.143","lastModified":"2026-10-16T20:04:29.760","description":"Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-295"],"vendors":[],"products":[],"references":[{"url":"https://knowledge.catonetworks.com/docs/security-vulnerability-cve-2026-19377-that-impacts-cato-client-versions","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}