Zscaler vulnerabilities

Products

• Client Connector 44
• Client Connector 41
• Internet Access Admin Portal 3
• Zia Admin Ui 2
• Client Connector 2

Newest

• zscaler zscaler-mcp-server HMAC Confirmation Token Unbinding in zscaler-mcp-server CVE-2026-59563 4.6 MediumSeptember 28, 2026
• zscaler zia file type control File Type Control rule bypass CVE-2026-25684 4.4 MediumSeptember 18, 2026
• zscaler client connector Android ZCC denial of service CVE-2026-59570 7.5 HighSeptember 14, 2026
• zscaler client connector Android ZCC VPN API method privilege escalation CVE-2026-59569 8.1 HighSeptember 14, 2026
• zscaler client connector ZCC race condition in ZPA tunnel handler CVE-2026-25687 8.1 HighSeptember 14, 2026
• zscaler client connector Remote Code Execution CVE-2026-59568 9.1 CriticalAugust 24, 2026
• zscaler client connector Local privilege escalation CVE-2026-59567 8.8 HighAugust 24, 2026
• zscaler client connector Local denial-of-service CVE-2026-59566 8.4 HighAugust 24, 2026
• zscaler client connector Local and kernel denial-of-service CVE-2026-59565 8.8 HighAugust 24, 2026
• zscaler client connector Authentication bypass between ZCC and client connector portal CVE-2026-59564 9.1 CriticalAugust 24, 2026
• zscaler client connector Incorrect startup configuration in ZCC CVE-2026-22569 5.4 MediumMarch 31, 2026
• zscaler zia admin ui, internet access admin portal +1 more ZIA Admin UI Input Validation Bug CVE-2026-22567 7.6 HighFebruary 23, 2026
• zscaler zia admin ui, internet access admin portal +1 more Unauthorized information retrieval in ZIA Admin UI CVE-2026-22568 5.5 MediumFebruary 23, 2026
• zscaler client connector Health check port on ZCC allows tunnel bypass CVE-2025-54983 5.2 MediumNovember 12, 2025
• zscaler authentication server SAML 2.0 Public Key Validation Issue CVE-2025-54982 9.6 CriticalAugust 5, 2025
• zscaler client connector MacOS Zscaler Client Connector Local Privilege Escalation CVE-2024-31127 7.3 HighJune 4, 2025
• zscaler client connector Signature validation error in DLL allows disabling anti-tampering protection CVE-2023-28806 5.7 MediumAugust 6, 2024
• zscaler client connector Local Privilege Escalation via lack of input validation CVE-2024-23483 7.0 HighAugust 6, 2024
• zscaler client connector Incorrect signature validation of package CVE-2024-23460 6.4 MediumAugust 6, 2024
• zscaler client connector Zscaler bypass with administrative privileges on Windows CVE-2024-23464 7.2 HighAugust 6, 2024
• zscaler client connector Local Privilege Escalation on Zscaler Client Connector on Windows CVE-2024-23458 7.3 HighAugust 6, 2024
• zscaler client connector Signature validation issue leads to Anti-Tampering bypass CVE-2024-23456 7.8 HighAugust 6, 2024
• ietf dhcp, cisco anyconnect vpn client, secure client +7 more +9 more DHCP routing options can manipulate interface-based VPN traffic CVE-2024-3661 Public exploitFix available 7.6 HighMay 6, 2024
• zscaler client connector ZCC Mac validinstaller file integrity check missing CVE-2024-23462 3.3 LowMay 2, 2024
• zscaler client connector ZCC macOS Upgrade ZIP Bomb DoS CVE-2024-23461 4.2 MediumMay 2, 2024
• zscaler client connector Multiple Arbitrary Creates/Overwrites by link following CVE-2024-23459 7.1 HighMay 2, 2024
• zscaler client connector Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control CVE-2023-41971 5.3 MediumMay 2, 2024
• zscaler client connector Repair App local code execution with arbitrary privileges CVE-2023-41970 6.0 MediumMay 2, 2024
• zscaler client connector Out-of-bounds write to heap in pacparser CVE-2023-28798 6.5 MediumMay 2, 2024
• zscaler client connector Insecure MacOS code sign check fallback CVE-2024-23480 7.5 HighMay 1, 2024
• zscaler client connector Anti-tampering can be disabled with uninstall password enforced CVE-2024-23457 7.8 HighMay 1, 2024
• zscaler client connector Anti-Tampering bypass via Repair App functionality CVE-2024-23463 8.8 HighApril 30, 2024
• zscaler client connector ZScalerService Local Privilege Escalation CVE-2024-23482 7.0 HighMarch 26, 2024
• zscaler client connector Lack of input santization on Zscaler Client Connector enables arbitrary code execution CVE-2023-41973 7.3 HighMarch 26, 2024
• zscaler client connector Revert password check incorrect type validation CVE-2023-41972 7.3 HighMarch 26, 2024
• zscaler client connector ZSATrayManager Arbitrary File Deletion CVE-2023-41969 7.3 HighMarch 26, 2024
• zscaler zia, secure internet and saas access +1 more Bypass of ZIA domain fronting detection module through evasion technique CVE-2023-28807 5.1 MediumJanuary 31, 2024
• zscaler client connector Disable Zscaler using machine tunnel restart CVE-2023-28802 4.9 MediumNovember 21, 2023
• zscaler client connector PAC Files Exposed to Internet Websites CVE-2023-28794 4.3 MediumNovember 6, 2023
• zscaler client connector ZCC on Linux privilege escalation CVE-2023-28805 6.7 MediumOctober 23, 2023
• zscaler client connector Linux ZCC allows unsigned updates, allowing elevated Code Execution CVE-2023-28804 8.2 HighOctober 23, 2023
• zscaler client connector Traffic being bypassed by ZCC by configuring synthetic IP range as local network CVE-2023-28803 5.9 MediumOctober 23, 2023
• zscaler client connector LPE using arbitrary file delete with Symlinks CVE-2023-28797 6.3 MediumOctober 23, 2023
• zscaler client connector IPC Bypass Through PLT Section in ELF CVE-2023-28796 7.1 HighOctober 23, 2023
• zscaler client connector Client IPC validation bypass CVE-2023-28795 7.8 HighOctober 23, 2023
• zscaler client connector Heap Based Buffer Overflow in Library CVE-2023-28793 7.8 HighOctober 23, 2023
• zscaler client connector Privilege Escalation for ZCC macOS via PATH Variable CVE-2021-26738 7.8 HighOctober 23, 2023
• zscaler client connector Privilege Escalation Using PID Reuse in ZCC macOS CVE-2021-26737 5.5 MediumOctober 23, 2023
• zscaler client connector ZApp Installer Privilege Escalation Vulnerabilities CVE-2021-26736 6.7 MediumOctober 23, 2023
• zscaler client connector Untrusted Search Path While Executing REG DELETE by Uninstaller CVE-2021-26735 6.7 MediumOctober 23, 2023
• Show olderLoading…