Known Vulnerabilities for SDP Client by Cato Networks
Listed below are 10 of the newest known vulnerabilities associated with "SDP Client" by "Cato Networks".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58450 json | Invoice Ninja through 5.13.26 contains an open redirect vulnerability in the client portal login that allows unauthenticated ... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-58399 json | @acastellon/auth is an authentication control system for microservices. Versions prior to 2.3.0 appear to allow an unauthenti... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-58167 json | Nightingale (n9e) before 9.0.0-beta.2 exposes full datasource configurations, including plaintext database passwords, HTTP be... | Not Provided | 2026-06-30 | 2026-06-30 |
| CVE-2026-58165 json | OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-58055 json | nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and bod... | Not Provided | 2026-06-28 | 2026-06-29 |
| CVE-2026-58051 json | libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing pop... | Not Provided | 2026-06-28 | 2026-06-29 |
| CVE-2026-58050 json | libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in... | Not Provided | 2026-06-28 | 2026-06-29 |
| CVE-2026-58015 json | A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-57962 json | A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-57954 json | Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSortingRules... | Not Provided | 2026-06-29 | 2026-06-30 |