Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Zscaler Client Connector Android: 4.2.0.152, ChromeOS: 4.2.0.152 Clear all filters
TI-2026-42532 CVE-2026-59570 · GHSA-cj79-f7p8-r2fv

Android ZCC denial of service

Priority LOW 32

On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture.

CVSS 3.1HIGH 7.5 Local Low privileges No interaction EPSS 0.00132 Published 2026-09-14 Fixed in Android: 4.2.0.152, ChromeOS: 4.2.0.152 CWE-20
TI-2026-42531 CVE-2026-59569 · GHSA-4vcv-p436-xxwh

Android ZCC VPN API method privilege escalation

Priority LOW 36

An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls.

CVSS 3.1HIGH 8.1 Local High privileges No interaction EPSS 0.00176 Published 2026-09-14 Fixed in Android: 4.2.0.152, ChromeOS: 4.2.0.152 CWE-20