CVE-2026-10739 – Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary

Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe.