CVE-2026-19377 – Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.