CVE-2026-10726 : 상세 정보

CVE-2026-10726

2026-09-30
12h17 +00:00
Authorization problems
A04-Insecure DesignA07-Identif. and Authent. Fail
2026-09-30
19h38 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate enforcement.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-73 External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
CWE-295 Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

참고 자료