CVEs published by Zscaler, Inc.

CVEs published by Zscaler, Inc. (CVE Numbering Authority). 10 tracked.

CVE-2026-59568 CRITICAL 9.1 Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving
CVE-2026-59564 CRITICAL 9.1 An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connec
CVE-2026-59565 HIGH 8.8 A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected v
CVE-2026-59567 HIGH 8.8 Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, gi
CVE-2026-59566 HIGH 8.4 A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Z
CVE-2026-59563 MEDIUM 4.6 Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the
CVE-2026-25687 HIGH 8.1 A race condition in the ZPA tunnel handler of affected versions of Zscaler Client Connector (ZCC) allows a hea
CVE-2026-59569 HIGH 8.1 An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attac
CVE-2026-59570 HIGH 7.5 On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, f
CVE-2026-25684 MEDIUM 4.4 A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper