A man-in-the-middle attacker can impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic due to improper certificate validation in the Cato Client tunnel handshake. This vulnerability allows for the interception or modification of tunnel traffic. Defenders responsible for configuring and maintaining Cato Client should assess their exposure and verify the certificate valida [truncated]
CVE-2025-14213 is a high-severity vulnerability in Cato Networks' Socket versions prior to 25. An authenticated attacker with access to the Socket web interface can execute arbitrary operating system commands as the root user on the Socket's internal system. This vulnerability allows for arbitrary OS command execution, posing a significant risk to organizations using affected versions. The vulnerability e [truncated]
