Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Zscaler Client Connector Android: 4.2, ChromeOS: 4.2 and 4 more versions Clear all filters
TI-2026-42530 CVE-2026-59568 · GHSA-m6h7-qfgx-p2gj

Remote code execution in Zscaler Client Connector

Priority MEDIUM 48

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00664 Published 2026-08-24 Fixed in Windows: 4.6.0.457, 4.7.0.317 +10 CWE-20
TI-2026-42526 CVE-2026-59564 · GHSA-r7wr-wrcm-fj8q

Authentication bypass between ZCC and client connector portal

Priority MEDIUM 48

An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00529 Published 2026-08-24 Fixed in Windows: 4.6.0.457, 4.7.0.317 +10 CWE-304