CVE-2026-10739 — Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation

CVE-2026-10739

Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation PUBLISHED

Description (CNA)

Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe.

Affected (CNA)

Vendor / product	Versions
Cato Networks / SDP Client	affected 0 before 6.12.6

CWE

CWE-23, CWE-59, CWE-73

References

https://knowledge.catonetworks.com/docs/cve-2026-10726-cve-2026-10739-impacts-windows-client-versions-lower-than-6126

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.