What is GHSA-v76q-8hm2-wrx6?

GHSA-v76q-8hm2-wrx6 is a security advisory published by GitHub Security Advisories with Medium severity. Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle...

Which CVE IDs does GHSA-v76q-8hm2-wrx6 cover?

GHSA-v76q-8hm2-wrx6 covers the following CVE IDs: CVE-2026-19377. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-v76q-8hm2-wrx6Medium

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle...

Vendor

GitHub Security Advisories

Published

October 15, 2026

Last Modified

October 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-19377 →

📋 Description

Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-19377
https://knowledge.catonetworks.com/docs/security-vulnerability-cve-2026-19377-that-impacts-cato-client-versions
https://github.com/advisories/GHSA-v76q-8hm2-wrx6