https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:56:56.376265+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331802 EUVD-2026-331802 2026-10-07T02:56:56.380099+00:00 EUVD-2026-331802 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12374 fkie_cve-2026-12374 2026-10-07T02:56:56.380134+00:00

Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a symlink swap during package installation.

 https://cve.radiocsirt.org/vuln/ghsa-fmmf-42mh-hr4x GHSA-fmmf-42mh-hr4x 2026-10-07T02:56:56.380167+00:00

Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a symlink swap during package installation.