SecAlerts
c

cato networks

Security Risk Profile

68
/100
high

Security Risk Score

Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 18, 2025 to present

9
Total CVEs
3
Critical+High
1
Exploited
3
Unpatched

Threat Assessment

Avg CVSS
8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
68/100
high
⚠️ 1 Active Exploits📈 1 in Last 30 Days

Severity Distribution

Critical
0
High
3
Medium
1
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
1

Age Distribution

Common Weaknesses (CWE)

1
Race Condition
1
2
OS Command Injection
1
3
Input Validation
1
4
Command Injection
1

Most Affected Products

1. Microsoft Copilot4
2. OpenAI GPT-4o4
3. Cato Networks DeepSeek4
4. Cato Networks Cato Client for macOS2
5. Cato Networks SDP Client for Windows1

Recent Vulnerabilities

See more →
CVE-2026-10739
CVSS 8.5high

Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation

Sep 30, 2026🔧 No Patch
CVE-2026-12374
CVSS 6.4medium

Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool

Jul 1, 2026🔧 No Patch
CVE-2025-14213
CVSS 8.3high

Cato's Socket WebUI is vulnerable to OS Command Injection

Mar 31, 2026🔧 No Patch
https://www.theregister.com/2025/11/25/hashjack_attack_ai_browser_hashtag/
unknown

HashJack attack shows AI browsers can be fooled with a simple ‘#’

Nov 25, 2025🔧 No Patch
CVE-2025-7012
CVSS 8.6EPSS 0%high

Cato Networks Linux Client Local Privilege Escalation via Symlink

Jul 13, 2025🔧 No Patch
ZDI-CAN-23275
unknown

ZDI-25-252: (0Day) Cato Networks Cato Client for macOS Helper Service Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

Apr 23, 2025🔧 No Patch
ZDI-25-252
unknown

(0Day) Cato Networks Cato Client for macOS Helper Service Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

Apr 23, 2025🔧 No Patch
https://www.zdnet.com/article/how-a-researcher-with-no-malware-coding-skills-tricked-ai-into-creating-chrome-infostealers/
unknown

How a researcher with no malware-coding skills tricked AI into creating Chrome infostealers

Mar 18, 2025⚠ Exploited🔧 No Patch
https://www.zdnet.com/article/ai-chatbots-can-be-hijacked-to-steal-chrome-passwords-new-research-exposes-flaw/
unknown

AI chatbots can be hijacked to steal Chrome passwords - new research exposes flaw

Mar 18, 2025🔧 No Patch

Monitor cato networks in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.