CVE-2026-10739

The Cato Networks SDP Client for Windows prior to version 6.12.6 is vulnerable to a local privilege escalation flaw that allows an attacker to delete arbitrary files with SYSTEM privileges due to inadequate validation of a client-supplied SID over a local IPC named pipe. This vulnerability poses a significant risk to system integrity and confidentiality, making it critical for organizations using affected versions of the software to prioritize patching. System administrators and security teams should act promptly to mitigate potential exploitation.