557 matches found
CVE-2026-59564
An authentication bypass vulnerability exists in the communications between affected versions of the Zscaler Client Connector (ZCC) and the Zscaler Client Connector Portal . The CVSS 3.1 score is 9.1 (Critical) , with a network attack vector , low complexity , and no privileges or user interactio...
CVE-2026-59564 Authentication bypass between ZCC and client connector portal
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
CVE-2026-59568: Improper Input Validation
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...
CVE-2026-59564: Missing Critical Step in Authentication
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal...
CVE-2026-59566: Improper Handling of Values
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...
PT-2026-80884
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Windows affected versions not specified Description A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack. A buffer overflow occurs when a program writes more data to a blo...
PT-2026-80886
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Multiple issues allow local privilege escalation, enabling an unprivileged user to execute arbitrary code within a privileged context. Recommendations At the moment, there is...
PT-2026-80866
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description An authentication bypass issue exists in the communications between the Zscaler Client Connector and the Zscaler Client Connector Portal. Authentication bypass occurs when an...
CVE-2026-59565: Improper Handling of Values
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows...
CVE-2026-59567: Improper Handling of Insufficient Permissions or Privileges
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...
PT-2026-80885
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Android and ChromeOS affected versions not specified Description A locally exploitable buffer overflow bug allows a local attacker to cause a denial-of-service attack. A buffer overflow occurs when a program writes...
PT-2026-80887
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Remote code execution flaws allow an unauthenticated and unprivileged user to execute arbitrary code within the ZCC context. This issue affects Windows, macOS, and mobile...
Zscaler Client Connector hard-coded proxy configuration domain
RISK EVALUATION ZScaler Client Connector 4.7 and 4.8 on Microsoft Windows hard codes a domain used to retrieve proxy configuration information. An attacker with control of this domain could provide arbitrary proxy configurations and intercept, redirect or disrupt traffic. 2. RECOMMENDED...
CVE-2026-22569
An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances...
EUVD-2026-17478
An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances...
CVE-2026-22569
An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances...
CVE-2026-22569
An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances...
CVE-2026-22569 Incorrect startup configuration in ZCC
An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances...
CVE-2026-22569 Incorrect startup configuration in ZCC
An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances...
CVE-2026-22569
The CVE-2026-22569 entry refers to an incorrect startup configuration in Windows deployments of Zscaler Client Connector, affecting limited traffic inspection under rare conditions. Affected software: Zscaler Client Connector for Windows. Vulnerable component/behavior: startup configuration that ...