CVE-2026-19377EPSS p0.2%

CVE-2026-19377CVE-2026-19377

Description

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.

Scoring

EPSS0.08% probability of exploitation · percentile 0.2% · 2026-10-16T12:02:51Z
Last modified2026-10-16
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.