399 matches found
EUVD-2026-64881
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows...
CVE-2026-59565
CVE-2026-59565 is a remotely exploitable buffer overflow in Zscaler Client Connector on Windows that can lead to a local and kernel denial-of-service . The CVSS 3.1 score is 8.8 (HIGH) (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CISA's SSVC assessment indicates no known exploitation , the vulnerabilit...
CVE-2026-59564
An authentication bypass vulnerability exists in the communications between affected versions of the Zscaler Client Connector (ZCC) and the Zscaler Client Connector Portal . The CVSS 3.1 score is 9.1 (Critical) , with a network attack vector , low complexity , and no privileges or user interactio...
CVE-2026-59564 Authentication bypass between ZCC and client connector portal
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
CVE-2026-59564 Authentication bypass between ZCC and client connector portal
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
EUVD-2026-64860
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
PT-2026-80887
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Remote code execution flaws allow an unauthenticated and unprivileged user to execute arbitrary code within the ZCC context. This issue affects Windows, macOS, and mobile...
PT-2026-80885
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Android and ChromeOS affected versions not specified Description A locally exploitable buffer overflow bug allows a local attacker to cause a denial-of-service attack. A buffer overflow occurs when a program writes...
CVE-2026-59567: Improper Handling of Insufficient Permissions or Privileges
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...
PT-2026-80886
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Multiple issues allow local privilege escalation, enabling an unprivileged user to execute arbitrary code within a privileged context. Recommendations At the moment, there is...
PT-2026-80866
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description An authentication bypass issue exists in the communications between the Zscaler Client Connector and the Zscaler Client Connector Portal. Authentication bypass occurs when an...
PT-2026-80884
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Windows affected versions not specified Description A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack. A buffer overflow occurs when a program writes more data to a blo...
CVE-2026-59565: Improper Handling of Values
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows...
CVE-2026-59566: Improper Handling of Values
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...
CVE-2026-59564: Missing Critical Step in Authentication
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
CVE-2026-59568: Improper Input Validation
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...
Zscaler Client Connector hard-coded proxy configuration domain
RISK EVALUATION ZScaler Client Connector 4.7 and 4.8 on Microsoft Windows hard codes a domain used to retrieve proxy configuration information. An attacker with control of this domain could provide arbitrary proxy configurations and intercept, redirect or disrupt traffic. 2. RECOMMENDED...
CVE-2026-22569
An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances...
