CVE-2023-41717

CVE-2023-41717 التحكم غير المناسب في أنواع الملفات في Zscaler Proxy الإصدارات 3.6.1.25 والإصدارات السابقة يسمح للمهاجمين المحليين بتجاوز قيود تنزيل/رفع الملفات. ملخص تنفيذي خلال صيف عام 2022، اكتشفت ثغرة أمنية تؤثر على وكيل ZScaler الإصدارات 3.6.1.25 والإصدارات السابقة. تسمح هذه الثغرة للمهاجمين...

tools

Zscaler ThreatLabz Tools Outils développés par l'équipe Threat Intelligence de Zscaler ThreatLabz Suivez-nous sur Twitter : @Threatlabz Blog : https://www.zscaler.com/blogs/security-research...

iocs

Zscaler ThreatLabz IOCs Ce dépôt contient des indicateurs de compromission IOC de l'équipe Zscaler ThreatLabz. Suivez-nous sur Twitter : @Threatlabz Blog : https://www.zscaler.com/blogs/security-research...

bug-bounty-reports-desai-vinayak

🧩 تقارير صيد الثغرات — ديساي فيناياك 🔒 تقارير صيد الثغرات وأبحاث الثغرات الأمنية بواسطة ديساي فيناياك. يجمع هذا المستودع تقارير سلبية غير مدمرة عن الثغرات والأدلة الداعمة للكشف المنسق وتتبع المعالجة. 📁 المحتويات 📂 reports/ — ملفات PDF و DOCX والأدلة لكل تقرير: 🧠...

CVE-2026-59563

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2...

EUVD-2026-88244

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2...

CVE-2026-59563 HMAC Confirmation Token Unbinding in zscaler-mcp-server

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2...

CVE-2026-59563

The Zscaler MCP Server versions 0.7.0 and 0.7.1 are vulnerable to a token replay issue. The root cause is that HMAC confirmation tokens are not bound to the target resource identifier. This allows an MCP client or agent to replay a token intended for one resource to impact another resource of the...

CVE-2026-59563 HMAC Confirmation Token Unbinding in zscaler-mcp-server

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2...

PT-2026-99880

Name of the Vulnerable Software and Affected Versions Zscaler MCP Server versions 0.7.0 through 0.7.1 Description HMAC confirmation tokens are not bound to the target resource identifier. This allows an MCP client or agent to replay a token generated for one resource to affect another resource of...

CVE-2026-59563: Authentication Bypass by Primary Weakness

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2...

CVE-2026-25684

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances...

EUVD-2026-82928

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances...

CVE-2026-25684 File Type Control rule bypass

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances...

CVE-2026-25684 File Type Control rule bypass

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances...

CVE-2026-25684

CVE-2026-25684 identifies a file type attribution issue in Zscaler Internet Access File Type Control evaluation rules. This may allow improper evaluation of File Type Control policies in rare circumstances, where a file's type is incorrectly attributed, potentially causing policy rules to be bypa...

PT-2026-95391

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances...

CVE-2026-25684: Improper Input Validation

A file type attribution issue in Zscaler Internet Access File Type Control evaluation rules may allow improper evaluation of File Type Control policies in rare circumstances...

CVE-2026-59569

An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls...

CVE-2026-59570

On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture...