--- title: "CVE-2026-10726 & CVE-2026-10739 that Impacts Windows Client Versions Lower than 6.12.6" slug: "cve-2026-10726-cve-2026-10739-impacts-windows-client-versions-lower-than-6126" updated: 2026-09-30T11:52:59Z published: 2026-09-30T11:52:59Z canonical: "knowledge.catonetworks.com/cve-2026-10726-cve-2026-10739-impacts-windows-client-versions-lower-than-6126" --- > ## Documentation Index > Fetch the complete documentation index at: https://knowledge.catonetworks.com/llms.txt > Use this file to discover all available pages before exploring further. # CVE-2026-10726 & CVE-2026-10739 that Impacts Windows Client Versions Lower than 6.12.6 Cato recently identified security vulnerabilities ([CVE-2026-10726](https://www.cve.org/CVERecord?id=CVE-2026-10726) and [CVE-2026-10739](https://www.cve.org/CVERecord?id=CVE-2026-10739)) that impact Cato Windows Clients with versions lower than 6.12.6. This CVE can allow attackers who have access to the Windows Client on the device to escalate their privileges. The Cato Windows Client version 6.12.6 (and higher) includes a security patch that fully remediates this vulnerability. We strongly recommend that you ensure all Windows Clients are upgraded to at least Windows Client version v6.12.6 to protect against the vulnerability. You can download the latest Windows Client version from the [Client Rollout](https://knowledge.catonetworks.com/docs/managing-the-rollout-of-client-versions-client-upgrade-policy#h_01jpj9tnq5s5txeye5c86stc7t) page in the Cato Management Application (open the [page](https://externallink.cc.catonetworks.com/#/account/me/ClientRollout)). ## What Changes Do I Need to Make? Use the [Access Overview Dashboard](https://knowledge.catonetworks.com/docs/using-the-access-overview-page) to identify users who have Windows Client versions lower than v6.12.6. Then make sure that they upgrade to at least Windows Client v6.12.6 to receive the most recent security patches and enhancements. Go to the **Access Methods** section and filter for **Cato Client** on **Windows** for the **Top Client Version**. ![](https://cdn.document360.io/81d0367c-2b69-4ba8-b412-1c8f46ce677e/Images/Documentation/access_methods.png?sv=2026-02-06&spr=https&st=2026-11-14T18%3A01%3A17Z&se=2026-11-14T19%3A01%3A17Z&sr=c&sp=r&sig=LBunEcUtyOS9f3RXdgGLj21vaHPKTtXnAzBNLaykqME%3D) We recommend that you use the Cato upgrade service to automatically upgrade Clients to the newest version. ## What is the Impact on the Account? If you don’t upgrade to Windows Client v6.12.6 or higher - those devices with older Client versions are vulnerable to malicious attacks that use CVE-2026-10726 and CVE-2026-10739. ## Who Do I Talk to If I Have Questions? Please use the [Cato Ask AI agent](/v1/docs/what-is-cato-s-ask-ai-agent) in the CMA for questions related to the Access Overview Dashboard and upgrading Windows Clients. Take me to the [CMA AI Workspace](https://externallink.cc.catonetworks.com/#/account/me/aiWorkspace).